4082 matches found
PT-2024-12648 · Fronius · Fronius Datalogger Web
Name of the Vulnerable Software and Affected Versions: Fronius Datalogger Web version 2.0.5-4 Description: An issue in the software allows remote attackers to obtain sensitive information via a crafted request. Recommendations: For version 2.0.5-4, at the moment, there is no information about a...
PT-2024-1513 · Unknown +2 · Libmodsecurity +3
Name of the Vulnerable Software and Affected Versions: ModSecurity / libModSecurity versions 3.0.0 through 3.0.11 Description: The issue is related to a WAF bypass for path-based payloads submitted via specially crafted request URLs. ModSecurity v3 decodes percent-encoded characters present in...
CVE-2023-7199
The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request...
WordPress plugin Relevanssi security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress plugin Relevanssi version...
The vulnerability of the UEFI loader’s shim, which exists due to the lack of measures taken to neutralize special elements, allows a hacker to execute arbitrary code.
The vulnerability of the UEFI loader “shim” exists due to the failure to implement measures to neutralize certain components. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted HTTP request...
CVE-2024-22372
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...
CVE-2024-22372
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...
CVE-2024-22372
OS command injection vulnerability in ELECOM wireless LAN routers allows a network-adjacent attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...
DEBIAN-CVE-2023-36177
An issue was discovered in badaix Snapcast version 0.27.0, allows remote attackers to execute arbitrary code and gain sensitive information via crafted request in JSON-RPC-API...
Trend Micro Apex Central 安全漏洞
Trend Micro Apex Central is a Web-based product console from Trend Micro. A local file inclusion vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to execute arbitrary code in the system context by submitting a special request...
Snapcast Security Breach
Snapcast is a multi-room client-server audio player where all clients are synchronized with server time to play perfectly synchronized audio. A security vulnerability exists in Snapcast version 0.27.0, which stems from a vulnerability that could allow a remote attacker to execute arbitrary code a...
CVE-2023-48118
SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page...
Sql injection
SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote attacker to execute arbitrary code via a crafted request to the Common.svc WSDL page...
The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools for installation work in production lines allows a perpetrator to execute arbitrary commands with elevated privileges.
The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious...
CVE-2023-50694
An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to send a malicious crafted request due to insufficient parsing in the parser.nim component...
CVE-2023-50693
An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...
Cross site request forgery (csrf)
An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request...
Design/Logic Flaw
An issue in dom96 HTTPbeast v.0.4.1 and before allows a remote attacker to execute arbitrary code via a crafted request to the parser.nim component...
PT-2024-13952 · Jester · Jester
Name of the Vulnerable Software and Affected Versions: Jester versions 0.6.0 and earlier Description: An issue in Jester allows a remote attacker to execute arbitrary code via a crafted request. This enables the attacker to send a maliciously crafted request, potentially leading to arbitrary code...