35247 matches found
CVE-2021-47903
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...
CVE-2026-22987
creationtimestamp| type| source ---|---|--- 2026-01-23 17:04:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md46mgm2ym2i...
CVE-2021-47903 LiteSpeed Web Server Enterprise 5.4.11 - Command Injection
LiteSpeed Web Server Enterprise 5.4.11 contains an authenticated command injection vulnerability in the external app configuration interface. Authenticated administrators can inject shell commands through the 'Command' parameter in the server configuration, allowing remote code execution via path...
CVE-2021-47903
LiteSpeed Web Server Enterprise version 5.4.11 has an authenticated command injection vulnerability in the external app configuration interface. A user with administrative privileges can inject shell commands via the Command parameter, enabling remote code execution through path traversal and bas...
CVE-2025-2204
Technical details about CVE-2025-2204 are not publicly available in the provided documents. Monitor for updates.
CVE-2025-2204 XSS in Tapandsign Technologies' Tap&Sign App
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Tapandsign Technologies Software Inc. Tap&Sign allows Cross-Site Scripting XSS. This issue affects Tap&Sign: through 23012026. NOTE: The vendor was contacted early about this disclosure but...
CVE-2026-24337
creationtimestamp| type| source ---|---|--- 2026-01-23 07:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md35xkdw5o2n...
CVE-2025-70457
A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...
The vulnerability of the SAP Fiori App web application, related to the falsification of cross-site requests, allows a hacker to compromise the integrity of the protected information.
The vulnerability of the SAP Fiori App relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...
The vulnerability of the SAP Fiori App web application, related to the disclosure of system data by unauthorized parties in the controlled area, allows attackers to gain unauthorized access to protected information.
The vulnerability of the SAP Fiori App relates to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
EUVD-2025-206331
A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...
PT-2026-4533
Name of the Vulnerable Software and Affected Versions Sourcecodester Modern Image Gallery App version 1.0 Description A Remote Code Execution RCE issue exists in the gallery/upload.php component of the application. The application does not properly validate uploaded file contents and preserves...
Most Common Issues with Salesforce Connected App in Veeam Data Cloud for Salesforce
Purpose This article documents the changes to Connected App usage in Veeam Data Cloud for Salesforce resulting from Salesforce's restriction of uninstalled connected apps, effective Autumn 2025. It provides guidance on authorization requirements, common connection errors, and necessary permission...
EUVD-2025-206330
A DOM-based Cross-Site Scripting XSS vulnerability exists in the DomainCheckerApp class within domain/script.js of Sourcecodester Domain Availability Checker v1.0. The vulnerability occurs because the application improperly handles user-supplied data in the createResultElement method by using the...
PT-2026-4516
Name of the Vulnerable Software and Affected Versions LiteSpeed Web Server Enterprise version 5.4.11 Description LiteSpeed Web Server Enterprise version 5.4.11 has an issue where a user with administrative privileges can inject commands into the system. This occurs through the 'Command' parameter...
CVE-2025-70457
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents and preserves user-supplied file extensions during the save process. This oversight allows ...
CVE-2025-70457: Unrestricted Upload of File with Dangerous Type
A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...
CVE-2025-70457
A Remote Code Execution RCE vulnerability exists in Sourcecodester Modern Image Gallery App v1.0 within the gallery/upload.php component. The application fails to properly validate uploaded file contents. Additionally, the application preserves the user-supplied file extension during the save...
CVE-2026-20888
creationtimestamp| type| source ---|---|--- 2026-01-22 23:10:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3md2cn4pklo2n 2026-01-24 21:22:10+00:00| seen| https://gist.github.com/alon710/c04d0150fe6489cd6aa0244c5949dba1 2026-05-13 05:04:19+00:00| seen|...
