RuoYi 4.7.3 vulnerable to arbitrary file upload in background management module

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

CVE-2022-32065

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

Design/Logic Flaw

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

CVE-2022-32065

An arbitrary file upload vulnerability in the background management module of RuoYi v4.7.3 and below allows attackers to execute arbitrary code via a crafted HTML file...

CVE-2022-34738

The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...

CVE-2022-34738

The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...

CVE-2022-34738

The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...

CVE-2022-34738

The SystemUI module has a vulnerability in permission control. If this vulnerability is successfully exploited, users are unaware of the service running in the background...

CVE-2022-34738

The CVE-2022-34738 entry applies to Huawei/HarmonyOS: SystemUI module has a permission-control vulnerability that could allow a background service to run without user awareness. Public references across CVE/NVD/Red Hat entries corroborate SystemUI privilege-management issues contributing to hidde...

openSUSE: Security Advisory for resource-agents (SUSE-SU-2022:2326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HUAWEI HarmonyOS SystemUI module privilege management vulnerability

HUAWEI HarmonyOS is an operating system from China's Huawei HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from improper privilege management in the SystemUI module, which could be exploited by an attacker to cause device services to run in the...

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from China's Huawei HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from improper privilege management in the SystemUI module, which could be exploited by an attacker to cause device services to run in the...

Criminals are applying for remote work using deepfake and stolen identities, says FBI

The FBI has warned businesses of an uptick in reports of criminals applying for remote work using deepfake and stolen PII personally identifiable information. A deepfake is essentially created or modified media image, video, or audio, often with the help of artificial intelligence AI and machine...

gnome-control-center bug fix and enhancement update

An update is available for gnome-control-center. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...

Mermaid 跨站脚本漏洞

Mermaid is a software application. Create charts and visualizations using text and code. A cross-site scripting vulnerability exists in Mermaid versions prior to 9.1.3, which stems from the fact that whenever there is an actual match, the browser issues an http request to load a background image,...

CVE-2021-40955

SQL injection exists in LaiKetui v3.5.0 the background administrator list...

LaikeTui 代码问题漏洞

LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. LaikeTui 3.5.0 version of a security vulnerability , the vulnerability stems from any file upload can exist in the background plug-ins , attackers can use the vulnerability to execute arbitrary code...

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

Malicious code in wix-bg-image (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e057e63506fd36e86a5d6687f73c1c4f071d94298b337d14b0a07a4f5922879 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...