16413 matches found
CVE-2020-37110
60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...
EUVD-2020-30985
60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...
arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1312 via django (>=5.2.0a1, <=5.2.10)
django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1312 Source advisory: SNYK:PYTHON-DJANGO-15198931...
arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2025-14550 via django (>=5.2.0a1, <=5.2.10)
django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2025-14550 Source advisory: SNYK:PYTHON-DJANGO-15198929...
arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1285 via django (>=5.2.0a1, <=5.2.10)
django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1285 Source advisory: OSV:GHSA-4RRR-2H4V-F3J9...
DEBIAN-CVE-2026-1285
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. django.utils.text.Truncator.chars and Truncator.words methods with html=True and the truncatecharshtml and truncatewordshtml template filters allow a remote attacker to cause a potential denial-of-service via...
arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +59 more potentially affected by CVE-2025-14550 via django (>=5.2.0, <=5.2.10)
django PYPI version =5.2.0, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2025-14550 Source advisory: OSV:PYSEC-2026-43...
urllib3: urllib3 Streaming API improperly handles highly compressed data
A decompression handling flaw has been discovered in urllib3. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP Content-Encoding header e.g., gzip, deflate, br, or zstd. The library must read compressed data from the network and decompress it...
BELL-CVE-2026-23018
Bulletin has no description...
CVE-2025-12773
creationtimestamp| type| source ---|---|--- 2026-02-03 03:17:21+00:00| seen| Telegram/CgBosmGjiUsFubMTPyQoIc-fq6HoQhesjtq1xv5gYNaUJw...
60CycleCMS SQL注入漏洞
60CycleCMS is an open-source content management system developed by 60CycleCMS. Version 2.5.2 of 60CycleCMS has a SQL injection vulnerability. This vulnerability stems from SQL injections in the news.php and common/lib.php files, which could allow attackers to manipulate database queries with...
CVE-2020-37110: Improper Neutralization of Special Elements used in an SQL Command
60CycleCMS 2.5.2 contains an SQL injection vulnerability in news.php and common/lib.php that allows attackers to manipulate database queries through unvalidated user input. Attackers can exploit vulnerable query parameters like 'title' to inject malicious SQL code and potentially extract or modif...
Linux arch/arm64/mm/pageattr.c Heap Buffer Overflow DoS
The vulnerability of the changememorycommon function in the arch/arm64/mm/pageattr.c module of the Linux operating system is related to the lack of checking of the returned value. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibilit...
PT-2026-5855
Name of the Vulnerable Software and Affected Versions 60CycleCMS version 2.5.2 Description The software contains an SQL injection issue in the 'news.php' and 'common/lib.php' files. Attackers can manipulate database queries through unvalidated user input. Specifically, the 'title' parameter is...
CGA-3MF8-Q3QQ-6GHW
Bulletin has no description...
DEBIAN-CVE-2025-71183
In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...
SUSE SLES15: kubernetes1.35-client / kubernetes1.35-client-bash-completion / etc (SUSE-SU-2026:0325-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0325-1 advisory. This update for kubernetes rebuilds it against the current GO security release. Tenable has extracted the preceding descriptio...
Rockwell Automation CompactLogix 5370 Denial of Service Vulnerability
Rockwell Automation CompactLogix 5370 is a programmable logic controller from Rockwell Automation. The Rockwell Automation CompactLogix 5370 suffers from a denial of service vulnerability that originates from sending a malformed CIP forward open message, which can be exploited by an attacker to...
TOTOLINK A7000R Command Injection Vulnerability
TOTOLINK A7000R is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A7000R version 4.1cu.4154 contains a command injection vulnerability. This vulnerability arises from incorrect handling of the parameter FileName in the file /cgi-bin/cstecgi.cgi, which may lead to command...