CVE-2019-3929

CVE-2019-3929 Crestron/Barco/Extron/InFocus/TeqAV रिमोट कमांड इंजेक्शन CVE-2019-3929 Metasploit मॉड्यूल Tenable के विवरण के अनुसार: "एक दूरस्थ, अनधिकृत हमलावर filetransfer.cgi HTTP एंडपॉइंट पर विशेष रूप से तैयार किए गए अनुरोधों के माध्यम से रूट के रूप में ऑपरेटिंग सिस्टम कमांड निष्पादित कर सकता ह...

CVE-2016-5640

CVE-2016-5640 Crestron AirMedia AM-100 RCE CVE-2016-5640 Metasploit-Modul Modul zur Ausnutzung einer Remote-Command-Injection-Sicherheitslücke auf der drahtlosen Diagnoseseite von Crestron AirMedia AM-100-Geräten mit einer Firmware-Version 1.4.0.13. Die Befehle werden unter dem Konto ausgeführt,...

CVE-2016-5639

CVE-2016-5639 Crestron AirMedia AM-100 Traversal e Hashdump Moduli Metasploit Due moduli simili che sfruttano CVE-2016-5639 per dumpare hash e recuperare file tramite path traversal. Ho realizzato questi moduli separati perché volevo fare esperienza nello scrivere qualcosa che potesse "dumpare"...

amradio

Sistema di Allerta Radio AM Un sistema di trasmissione radio AM a 12 canali che utilizza FPGA Red Pitaya per la trasmissione di allarmi di emergenza in gallerie non presidiate. Perché la radio AM in un tunnel? Durante la costruzione e la manutenzione, i veicoli con radio AM standard transitano...

CVE-2019-25465

Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting directory listing in the cgi-bin directory. Attackers can request the getadslattr.cgi endpoint to retrieve ADSL credentials and netwo...

CVE-2025-1529

The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded lottie files in all versions up to, and including, 3.5.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and...

CVE-2025-69006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

EUVD-2025-205737

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

CVE-2025-69006

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

CVE-2025-69006

Technical details about CVE-2025-69006 are not provided in the supplied documents; no vendor, product version, impact, or remediation specifics are included beyond the basic description.

CVE-2025-69006 WordPress AM Events plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

CVE-2025-69006 WordPress AM Events plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Atte Moisio AM Events am-events allows Stored XSS.This issue affects AM Events: from n/a through = 1.13.1...

PT-2025-53888

Name of the Vulnerable Software and Affected Versions Atte Moisio AM Events versions through 1.13.1 Description The software contains a flaw due to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts can ...

WordPress plugin AM Events 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...

WordPress AM Events plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Nur Ibnu Hubab in WordPress Plugin AM Events versions = 1.13.1...

WordPress plugin Upload.am 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, and WordPress plugin is an application plugin. An arbitrary option disclosure vulnerability exists in WordPress Upload.am, which stems from a lack of capability checking by the AJAX request processor, which can be...

EUVD-2025-147003

Malicious code in uinsu-lisa-am npm...

CVE-2025-53245

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

PT-2025-45221

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Afzal Multani WP Logo Changer am-login-logo allows Stored XSS.This issue affects WP Logo Changer: from n/a through = 1.2...

WSO2多款产品 安全漏洞

WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is a set of API lifecycle management solutions.WSO2 Identity Server IS is an identity server.WSO2 Enterprise Integrator is a set of open source hybrid integration platform. A security vulnerability exists i...