RabbitMQ 跨站脚本漏洞

RabbitMQ is a feature-rich multi-protocol messaging and streaming agent from the RabbitMQ open source. A cross-site scripting vulnerability exists in RabbitMQ versions prior to 4.0.3, which stems from an unescaped virtual host name that could lead to the execution of arbitrary JavaScript code in ...

CVE-2023-25610

A buffer underwrite 'buffer underflow' vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, versio...

CVE-2023-25610

A buffer underwrite 'buffer underflow' vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, versio...

PT-2025-12814 · Rockwell Automation · Verve Asset Manager

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Verve Asset Manager versions 1.39 and prior Description: A vulnerability exists in the Rockwell Automation Verve Asset Manager due to insufficient variable sanitizing in the administrative web interface for Verve's Legacy...

appRain CMF 4.0.5 Shell Upload

appRain CMF version 4.0.5 proof of concept shell upload exploit that leverages a vulnerability originally found in 2024. ============================================================================================================================================= | Title : appRain CMF 4.0.5 shell...

OS Command Injection in administrative interface

...

CVE-2021-37787

The unprivileged administrative interface in ABO.CMS version 5.8 through v.5.9.3 is affected by a SQL Injection vulnerability via a HTTP POST request to the TinyMCE module...

UniRide Vehicle Booking Management System 1.0 Insecure Direct Object Reference

UniRide Vehicle Booking Management System version 1.0 suffers from an insecure direct object reference vulnerability. ============================================================================================================================================= | Title : UniRide Vehicle Booking...

Linux Distros Unpatched Vulnerability : CVE-2014-0483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The administrative interface contrib.admin in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if...

CVE-2022-41545

The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 and possibly others authenticates users via basic authentication, with an HTTP header containing a base64 value of the plaintext username and password. Because the web server also does not utilize transpor...

CVE-2022-41545

The administrative web interface of a Netgear C7800 Router running firmware version 6.01.07 and possibly others authenticates users via basic authentication, with an HTTP header containing a base64 value of the plaintext username and password. Because the web server also does not utilize transpor...

Netgear C7800 Missing Transport Encryption

Netgear C7800 suffers from a man-in-the-middle vulnerability...

CVE-2025-24865

The administrative web interface of mySCADA myPRO Manager can be accessed without authentication which could allow an unauthorized attacker to retrieve sensitive information and upload files without the associated password...

CVE-2024-36787

An issue in Netgear WNR614 JNR1010V2 N300-V1.1.0.541.0.1 allows attackers to bypass authentication and access the administrative interface via unspecified vectors...

CVE-2020-11551

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote write of arbitrary Wi-Fi...

CVE-2020-11550

An issue was discovered on NETGEAR Orbi Tri-Band Business WiFi Add-on Satellite SRS60 AC3000 V2.5.1.106, Outdoor Satellite RBS50Y V2.5.1.106, and Pro Tri-Band Business WiFi Router SRR60 AC3000 V2.5.1.106. The administrative SOAP interface allows an unauthenticated remote leak of sensitive/arbitra...

PT-2025-6278

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.0.16 FortiProxy versions 7.0.0 through 7.0.19 FortiProxy versions 7.2.0 through 7.2.12 Description An authentication bypass issue exists in the Node.js WebSocket module and CSF proxy requests. This flaw allows ...

Arbitrary file delete on firmware import image feature

...

Arbitrary file deletion in administrative interface

...

The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool allows a perpetrator to interact with resources of other organizations.

The vulnerability of the administration interface of the Fortinet FortiPortal security analysis and management tool involves bypassing authentication using a user-controlled key. Exploiting this vulnerability allows a malicious actor to interact with resources of other organizations by sending...