CVE-2025-30047

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

CVE-2025-30047

The CGM CLININET server is vulnerable to Remote Code Execution (RCE) due to the deserialization of untrusted data within an HTTP-based API used by the administrative module. An attacker located within the same local network can transmit a crafted serialized Java object to this API, leading to arb...

CVE-2025-30047 Remote Code Execution via Java Deserialization in CGM CLININET

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

CVE-2025-30047 Remote Code Execution via Java Deserialization in CGM CLININET

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

EUVD-2025-211178

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

PT-2026-121800

CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that exchanges data using Java object serialization. An attacker within the same local network is able to send requests to this...

CVE-2026-108827

A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zencallfunction of the file admin/includes/functions/general.php of the component Administrative Module Management. Executing a manipulation of the argument usefunction can lead to code injection. The attack can be...

CVE-2026-108827

A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zencallfunction of the file admin/includes/functions/general.php of the component Administrative Module Management. Executing a manipulation of the argument usefunction can lead to code injection. The attack can be...

CVE-2026-108827

Zen Cart versions up to 2.2.2 are affected by a code injection vulnerability in the Administrative Module Management component, specifically within the zen_call_function function located in admin/includes/functions/general.php. An attacker can remotely trigger code injection by manipulating the u...

CVE-2026-108827 Zen Cart Administrative Module Management general.php zen_call_function code injection

A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zencallfunction of the file admin/includes/functions/general.php of the component Administrative Module Management. Executing a manipulation of the argument usefunction can lead to code injection. The attack can be...

EUVD-2026-97333

A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zencallfunction of the file admin/includes/functions/general.php of the component Administrative Module Management. Executing a manipulation of the argument usefunction can lead to code injection. The attack can be...

PT-2026-110539

Name of the Vulnerable Software and Affected Versions Zen Cart versions prior to 2.2.3 Description Code injection is possible via the Administrative Module Management component. The issue exists in the zen call function function within the admin/includes/functions/general.php file. A remote...

CVE-2026-108827: Improper Control of Generation of Code

A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zencallfunction of the file admin/includes/functions/general.php of the component Administrative Module Management. Executing a manipulation of the argument usefunction can lead to code injection. The attack can be...

CVE-2025-66947

SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...

CVE-2025-66947: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...

CVE-2024-42995

VTiger CRM = 8.1.0 does not correctly check user privileges. A low-privileged user can interact directly with the "Migration" administrative module to disable arbitrary modules...

PT-2024-30248

Name of the Vulnerable Software and Affected Versions VTiger CRM versions = 8.1.0 Description The issue concerns incorrect user privilege checking, allowing a low-privileged user to interact directly with the "Migration" administrative module. This enables the user to disable arbitrary modules...

CVE-2024-42995

VTiger CRM = 8.1.0 does not correctly check user privileges. A low-privileged user can interact directly with the "Migration" administrative module to disable arbitrary modules...

CVE-2024-42995

VTiger CRM versions 8.1.0 and prior are affected by a vulnerability where the system fails to properly validate user permissions. This flaw allows a low-privileged user to directly access the Migration administrative module. Exploitation of this weakness enables the attacker to disable arbitrary ...

DarkPulsar

In March 2017, the ShadowBrokers published a chunk of stolen data that included two frameworks: DanderSpritz and FuzzBunch. DanderSpritz consists entirely of plugins to gather intelligence, use exploits and examine already controlled machines. It is written in Java and provides a graphical window...