CVE-2023-44856

Cross Site Scripting XSS vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the rstat, sender, and recipients' parameters of the sub21D24 function in the acuweb file...

CVE-2023-44857: Improper Control of Generation of Code

An issue in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the sub21D24 function in the acuweb component...

CVE-2023-44852

A Cross Site Scripting (XSS) vulnerability exists in Cobham SAILOR VSAT Ku v.164B019 . A remote attacker can execute arbitrary code by sending a crafted script to the c_set_traps_decode function within the acu_web file. As a temporary workaround, users are advised to disable the c set traps decod...

CVE-2023-44853

A remote code execution vulnerability exists in Cobham SAILOR VSAT Ku v.164B019 maritime satellite communications products. The flaw originates from the sub_219C4 function within the acu_web file, which allows an attacker to execute arbitrary code by providing a crafted script . As a temporary wo...

CVE-2024-26574

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

CVE-2024-26574

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

CVE-2024-26574

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

CVE-2024-26574

Wondershare Filmora v.13.0.51 and earlier versions are affected by an Insecure Permissions vulnerability. The installation creates a directory at C:\Users\%username%\AppData\Local\Wondershare\Wondershare NativePush with overly permissive ACLs, granting full access to all system users. A local att...

PT-2024-21426

Name of the Vulnerable Software and Affected Versions Wondershare Filmora version 13.0.51 Description The issue allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe. This can be exploited by a local attacker. Recommendations For Wondershare Filmora...

CVE-2024-26574: Incorrect Default Permissions

Insecure Permissions vulnerability in Wondershare Filmora v.13.0.51 allows a local attacker to execute arbitrary code via a crafted script to the WSNativePushService.exe...

CVE-2024-25503

Cross Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function...

CVE-2024-25503

The Advanced REST Client desktop application (v.17.0.9) contains a Cross Site Scripting (XSS) vulnerability. A remote attacker can execute arbitrary code and obtain sensitive information by exploiting the edit details parameter within the New Project function. The attack vector involves a user im...

CVE-2024-25503

Cross Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function...

CVE-2024-25503

Cross Site Scripting XSS vulnerability in Advanced REST Client v.17.0.9 allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function...

CA17 TeamsACS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

GHSA-HWVW-GH23-QPVQ CA17 TeamsACS Cross Site Scripting vulnerability

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2024-22780

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

CVE-2024-22780

Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter...

TeamsACS 安全漏洞

TeamsACS is an 189CSP open source TR069 Automated Configuration Server ACS designed specifically for Mikrotik devices. Designed to help administrators remotely manage and configure Mikrotik units via the TR069 protocol. A security vulnerability exists in TeamsACS version v.1.0.1, which stems from...

Dcat Admin 安全漏洞

Dcat Admin is a backend system builder based on the secondary development of laravel-admin by Jiang Qinghua's personal developer. A security vulnerability exists in Dcat Admin v.2.1.3 and earlier versions. The vulnerability can be exploited by remote attackers to execute arbitrary code in the use...