15111 matches found
CVE-2021-47757
CVE-2021-47757 affects Chikitsa Patient Management System 2.0.2. An authenticated remote code execution vulnerability exists in the backup restoration functionality: an authenticated attacker can upload a modified backup ZIP containing a malicious PHP shell to execute arbitrary system commands on...
EUVD-2026-2778
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server...
CVE-2021-47757 Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server...
CVE-2021-47757 Chikitsa Patient Management System 2.0.2 - 'plugin' Remote Code Execution (RCE) (Authenticated)
Chikitsa Patient Management System 2.0.2 contains an authenticated remote code execution vulnerability in the backup restoration functionality. Authenticated attackers can upload a modified backup zip file with a malicious PHP shell to execute arbitrary system commands on the server...
PT-2026-3183
Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a large buffer of 256 repeated characters into the registration key field to trigger application instability an...
Chikitsa code vulnerabilities
Chikitsa is a patient management system developed by the individuals at Sanskruti Technologies. Version Chikitsa 2.0.2 has code vulnerabilities; these vulnerabilities stem from the backup and recovery function, and could allow authenticated attackers to execute remote code...
PT-2026-3033
Name of the Vulnerable Software and Affected Versions Chikitsa Patient Management System version 2.0.2 Description The software contains an authenticated remote code execution issue in the backup restoration functionality. An authenticated attacker can upload a modified backup zip file containing...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002764)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002764 advisory. The vmwgbsurfacedefineioctl function accessible via DRMIOCTLVMWGBSURFACECREATE in drivers/gpu/drm/vmwgfx/vmwgfxsurface.c in the Linux kernel through 4.11.4 defines a...
CVE-2022-50923
Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...
CVE-2022-50923
Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...
CVE-2025-46286
A logic issue was addressed with improved validation. This issue is fixed in iOS 26.2 and iPadOS 26.2. Restoring from a backup may prevent passcode from being required immediately after Face ID enrollment...
CVE-2022-50923 Cobian Backup 0.9 - Unquoted Service Path
Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...
CVE-2022-50923
Summary of CVE-2022-50923 (Cobian Backup 0.9) : An unquoted service path in the CobianReflectorService creates a local privilege escalation risk, allowing a local user to execute arbitrary code with LocalSystem privileges during service startup. This is defined by the unquoted binary path and is ...
CVE-2022-50923 Cobian Backup 0.9 - Unquoted Service Path
Cobian Backup 0.9 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the CobianReflectorService to inject malicious code that will execute with LocalSystem permissions...
PT-2026-2399
Name of the Vulnerable Software and Affected Versions Cobian Backup version 0.9 Description A local user can execute arbitrary code with elevated system privileges. This is due to an unquoted service path in the CobianReflectorService, allowing attackers to inject malicious code that executes wit...
Cobian Backup 代码问题漏洞
Cobian Backup is a file backup software by Luis Cobian Personal Developer. A code issue vulnerability exists in Cobian Backup version 0.9, which stems from the presence of an unquoted service path to the CobianReflectorService, which could lead to the execution of arbitrary code by a local user...
PT-2026-7477
Name of the Vulnerable Software and Affected Versions Migration, Backup, Staging – WPvivid Backup & Migration versions prior to 0.9.124 Description An unauthenticated arbitrary file upload issue exists due to improper error handling during the RSA decryption process and a lack of path sanitizatio...
FreeBSD : phpmyfaq -- multiple vulnerabilities (79c3c751-ee20-11f0-b17e-50ebf6bdf8e9)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 79c3c751-ee20-11f0-b17e-50ebf6bdf8e9 advisory. phpMyFAQ team reports: Stored cross-site scripting XSS and unauthenticated config backup download...