CVE-2026-79035

A reflected cross-site scripting (XSS) vulnerability exists in the p.rfihub.com component of Zeta Marketing Platform (ZMP) v1.0 . An attacker can inject a crafted URL into the ca parameter to execute arbitrary JavaScript in the victim's browser context. The provided references link to a proof-of-...

EUVD-2026-76700

A reflected cross-site scripting XSS vulnerability in the p.rfihub.com component of Zeta Marketing Platform ZMP v1.0 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted URL into the ca parameter...

Thunderwind Movie CMS Aj***.php page ca*** parameter SQL injection vulnerability

Thunderwind CMS is a video-on-demand system developed using Thinkphp framework + Mysql to ensure the stability and efficiency of the program. Thunderwind Movie CMS Aj.php page ca parameters exist SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database...

DEBIAN-CVE-2017-2299

Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the sslca parameter but do not specify the sslcertsdir parameter, a default will be provided for the sslcertsdir that will trust certificates from any of the...