CVE-2026-14632

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of the file application/core/MYController.php of the component Trusted Backend Interface. The manipulation of the argument hr...

CVE-2026-14632 kirilkirkov Ecommerce-CodeIgniter-Bootstrap Trusted Backend MY_Controller.php setReferrer redirect

A vulnerability was found in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 95dfa8cebbb87ab46ae450643a07241274a74dce. Affected by this issue is the function setReferrer of the file application/core/MYController.php of the component Trusted Backend Interface. The manipulation of the argument hr...

EUVD-2022-33536

Malicious code in bioql PyPI...

The vulnerability of the User Interface Application Core in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the User Interface Application Core in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading a specially created file...

CVE-2023-36393

Windows User Interface Application Core Remote Code Execution Vulnerability...

CVE-2023-36393: Untrusted Search Path

Windows User Interface Application Core Remote Code Execution Vulnerability...

PT-2023-6948 · Microsoft · Windows User Interface Application Core +1

Name of the Vulnerable Software and Affected Versions: Windows User Interface Application Core affected versions not specified Description: The issue is related to insufficient input validation in the Windows User Interface Application Core, which can be exploited by attackers to execute arbitrar...

Microsoft Windows Multiple Vulnerabilities (KB5029253)

This host is missing an important security update according to Microsoft KB5029253 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-36898

Tablet Windows User Interface Application Core Remote Code Execution Vulnerability...

CVE-2023-36898: Untrusted Search Path

Tablet Windows User Interface Application Core Remote Code Execution Vulnerability...

CVE-2022-47909

Livestatus Query Language LQL injection in the AuthUser HTTP query header of Tribe29's Checkmk = 2.1.0p11, Checkmk = 2.0.0p28, and all versions of Checkmk 1.6.0 EOL allows an attacker to perform direct queries to the application's core from localhost...

CVE-2022-29126: Undefined Security Weakness

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

CVE-2022-21870

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

Privilege escalation

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

ASB-A-170658976

In fillthreadcoreinfo of binfmtelf.c, there is a possible leak of kernel heap memory due to uninitialized data. This could lead to local information disclosure to an application core dump with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2017-11819

Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-12 Description The issue allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action in the application/core/controller/images.php file. Recommendations For FineCMS through...

CVE-2017-11201: Improper Neutralization of Input During Web Page Generation

application/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action...

CVE-2017-11200: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitorip parameter...

CVE-2017-11178: Insufficient Verification of Data Authenticity

In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked...

PT-2017-11645

Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-07 Description The issue allows remote PHP code execution. This can be achieved by placing the code after "?php" in a route=template request, specifically in the application/core/controller/template.php file...