37693 matches found
pybbs 代码注入漏洞
pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which originates in files/api/settings leading to cross-site scripting that could lead to remote attacks...
Portabilis i‑Diário 代码注入漏洞
Portabilis i-Diário is an open source school calendar and teacher interaction management system from Portabilis, Brazil. A code injection vulnerability exists in Portabilis i-Diário 1.5.0 and earlier versions, which originates in the file /planos-de-aula-por-areas-de-conhecimento/ in the paramete...
Exploit for Code Injection in Xwiki
CVE-2025-24893-P...
CVE-2025-54393
Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access...
mall 代码注入漏洞
mall is a set of e-commerce system for macro individual developers, including the front-end mall system and back-end management system. mall 1.0.3 and previous versions of the code injection vulnerability, the vulnerability stems from the file /minio/upload parameter File improper handling, may...
Datacom DM955 5GT 代码注入漏洞
The Datacom DM955 5GT is a router from Datacom New Zealand. A code injection vulnerability exists in the Datacom DM955 5GT version 1200 825.8010.00, which stems from improper handling of the parameter SSID and could lead to cross-site scripting attacks...
OpenBao 代码注入漏洞
OpenBao is OpenBao open source a sensitive data management software . A code injection vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause unauthorized code execution and network access...
Total WebShield Extension 代码注入漏洞
Total WebShield Extension is a browser extension from Total WebShield that enhances web security. A code injection vulnerability exists in Total WebShield Extension 3.2.0 and earlier versions, which stems from improper handling of the parameter Category and could lead to cross-site scripting...
Portábilis i-Educar 代码注入漏洞
Portábilis i-Educar is an application from Portábilis. It can easily help you with basic and technical education. A code injection vulnerability exists in Portábilis i-Educar version 2.9 and earlier, which stems from improper handling of the parameter nome in the file...
Craft CMS 代码注入漏洞
Craft CMS is an open source content management system CMS from Craft CMS. A code injection vulnerability exists in Craft CMS versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3, which stems from a security key compromise that could allow remote code execution...
Arbitrary Code Injection
Overview craftcms/cms is a content management system. Affected versions of this package are vulnerable to Arbitrary Code Injection via the /updater/restore-db endpoint. An attacker can execute arbitrary code by crafting a malicious request after obtaining a compromised security key and creating a...
Scada-LTS 代码注入漏洞
Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A code injection vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from an incorrect manipulation of the parameter Name, resulting in cross-site scripting...
My-Blog 代码注入漏洞
My-Blog is ZHENFENG13 individual developer by SpringBoot + Mybatis + Thymeleaf and other technologies to achieve the Java blog system, page beautiful, full-featured, easy to deploy and perfect code. A code injection vulnerability exists in My-Blog 1.0.0 and earlier versions, which stems from...
Exploit for Code Injection in Xwiki
CVE-2025-24893 Bash POC script for RCE vulnerability in XWiki...
CVE-2025-54393
Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access...
CVE-2025-54393
Netwrix Directory Manager formerly Imanami GroupID 11.0.0.0 before 11.1.25162.02 allows Static Code Injection. Authenticated users can obtain administrative access...
PT-2025-32279 · Imanami +1 · Groupid +1
Name of the Vulnerable Software and Affected Versions: Netwrix Directory Manager versions 11.0.0.0 through 11.1.25162.02 Description: Netwrix Directory Manager formerly Imanami GroupID is susceptible to a static code injection issue. Authenticated users can potentially gain administrative access...
Netwrix Directory Manager 安全漏洞
Netwrix Directory Manager is a group and user management software from Netwrix. A security vulnerability exists in Netwrix Directory Manager versions prior to 11.1.25162.02, which stems from a static code injection vulnerability that could lead to elevation of privilege...
CVE-2025-54393
Netwrix Directory Manager (formerly Imanami GroupID) 11.0.0.0 through 11.1.25162.02 is affected by a static code injection vulnerability that authenticated users can exploit to obtain administrative access. The issue is documented under CVE-2025-54393. Remediation: upgrade to version 11.1.25162.0...
