CVE-2026-32238 OpenEMR has Remote Code Execution in backup functionality

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.2 contain a Command injection vulnerability in the backup functionality that can be exploited by authenticated attackers. The vulnerability exists due to insufficient...

Discourse 3.6.x < 3.6.0.beta1 Multiple Vulnerabilities

Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...

Ecshop后台getshell-2

简要描述： Ecshop后台getshell-2 详细说明： admin/database.php if $REQUEST'act' == 'dumpsql' 省略若干 if empty$REQUEST'sqlfilename' $sqlfilename = $dump-getrandomname; else 省略若干 $sqlfilename = strreplace"0xa", '', trim$REQUEST'sqlfilename'; // 过滤 0xa 非法字符 $pos = strpos$sqlfilename, '.sql'; if $pos !== false...