185 matches found
CVE-2025-7065
The CVE-2025-7065 entry involves PAD CMS photo upload where a client-controlled permission-check parameter allows unauthenticated remote attackers to upload files of any type/extension, potentially leading to Remote Code Execution. Affected are all three templates: www, bip, and ww+bip. The under...
CVE-2025-7063 Remote Code Execution via Unrestricted File Upload in PAD CMS
Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, b...
PT-2025-39966
Name of the Vulnerable Software and Affected Versions PAD CMS affected versions not specified Description The software improperly initializes a parameter used during the password recovery process. This allows an attacker to change the password for any user who has not utilized the password reset...
CVE-2025-7761
Lepszy BIP is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did no...
MAL-2025-9830 Malicious code in @zalastax/nolb-_bip (npm)
The package @zalastax/nolb-bip was found to contain malicious code...
CVE-2025-7761 Reflected XSS in Lepszy BIP
Lepszy BIP is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did no...
CVE-2025-7761
CVE-2025-7761 – Reflected XSS in Lepszy BIP : The vulnerability arises from improper input validation in the index.php form parameter, allowing arbitrary JavaScript to execute in a victim’s browser when a specially crafted URL is opened. Affected: Lepszy BIP (potentially all versions). Root cause...
CVE-2025-7761 Reflected XSS in Lepszy BIP
Lepszy BIP is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did no...
Lepszy BIP 安全漏洞
Lepszy BIP is a business innovation platform from the Polish company Lepszy BIP. A security vulnerability exists in Lepszy BIP that stems from insufficient validation of index.php parameter inputs leading to a reflective cross-site scripting attack...
CVE-2021-22645
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll fro...
SQL Injection Vulnerability in UFIDA BIP of UFIDA Network Technology Co.
UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...
Bitcoin Core 安全漏洞
Bitcoin Core is a Bitcoin open source client for verifying the validity of blockchain transactions. A security vulnerability exists in Bitcoin Core versions prior to 0.20.0. A remote attacker could exploit this vulnerability to cause a denial of service via the BIP21 r parameter of a URL containi...
Malicious code in bip-uutils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4817 Malicious code in bip-uutils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bip-utlils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bip-uttils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4815 Malicious code in bip-utlils (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bip-utisl (PyPI)
--- -= Per source details. Do not edit below this line.=-...