7 matches found
CVE-2026-43984
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Versions prior to 2.17.1 expose logjserrors to any authenticated user, including guest users when guest access is enabled. The endpoint writes attacker-controlled strings directly into the main application log. The...
EUVD-2024-19723
Malicious code in bioql PyPI...
EUVD-2022-5323
Malicious code in bioql PyPI...
EUVD-2021-30369
Malicious code in bioql PyPI...
SAP NetWeaver AS Java Code Injection (March 2024)
SAP NetWeaver Application Server for Java is affected by code injection vulnerability: - SAP NetWeaver Administrator AS Java Administrator Log Viewer plug-in - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerabilit...
CVE-2024-22127 Code Injection vulnerability in SAP NetWeaver AS Java (Administrator Log Viewer plug-in)
SAP NetWeaver Administrator AS Java Administrator Log Viewer plug-in - version 7.50, allows an attacker with high privileges to upload potentially dangerous files which leads to command injection vulnerability. This would enable the attacker to run commands which can cause high impact on...
3 6 0 web site security detection score may be forgery vulnerability-vulnerability warning-the black bar safety net
Detailed description: Testing Server site when the administrator to view the log, access to the ip, the seal off can. in. Vulnerability proof: I sealed the ip section is: deny 218.30.117.0/2 4; deny 182.118.33.0/2 4; deny 123.125.160.0/2 4; ! Repair solutions: I would also like to see this produc...