CVE-2022-31491

CVE-2022-31491 이 저장소에는 Metasploit 모듈과 PoC 파일이 포함되어 있습니다. 추가 정보 Voltronic Viewpower/Pro 및 리브랜드/파생 제품 UPS 관리 소프트웨어는 일반적으로 웹 인터페이스를 통해 적절히 인증 및 권한이 부여된 사용자가, 소프트웨어가 관리 중인 UPS의 종료를 감지할 때 사용자가 선택한 단일 OS 명령을 실행하도록 시스템을 구성할 수 있게 합니다. 예를 들어 일괄 작업batch job을 중지하거나 단일 명령으로 다른 시스템에 알림을 보내는 경우입니다. 관련된 중요한 기반...

CVE-2025-53964

CVE-2025-53964 위험 평가 CVSS v3: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - 9.6/10 설명 GoldenDict 1.5.0 및 1.5.1에는 노출된 위험한 메서드가 있어, 사용자가 조작된 사전을 추가한 후 해당 사전에 포함된 용어를 검색하면 파일을 읽고 수정할 수 있습니다. 추가 정보 이 제품은 외부 행위자와의 상호 작용을 위한 인터페이스를 제공하며, 여기에는 GoldenDictver. 1.5.0, 1.5.1의 위험한 메서드가 포함되어 있으나 적절히 제한되지 않습니다. 이로 인해 ...

Exploit for Exposure of Private Personal Information to an Unauthorized Actor in Mozilla Firefox

SkeletonKey CVE-2026-6765 · Test only FormAutofill handle...

Orchid Platform has Method Exposure Vulnerability in Modals

Impact This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecting users of Orchid Platform version 8 through 14.42.x. Attackers could exploit this vulnerability to call arbitrary methods within t...

GHSA-CM46-GQF4-MV4F Orchid Platform has Method Exposure Vulnerability in Modals

Impact This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecting users of Orchid Platform version 8 through 14.42.x. Attackers could exploit this vulnerability to call arbitrary methods within t...

CVE-2024-51992

Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecti...

CVE-2024-51992 Method Exposure Vulnerability in Modals in orchid/platform

Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecti...

CVE-2024-51992 Method Exposure Vulnerability in Modals in orchid/platform

Orchid is a @laravel package that allows for rapid application development of back-office applications, admin/user panels, and dashboards. This vulnerability is a method exposure issue CWE-749: Exposed Dangerous Method or Function in the Orchid Platform’s asynchronous modal functionality, affecti...

CVE-2024-51992

The CVE-2024-51992 issue affects Orchid Platform versions 8 through 14.42.x and stems from a method exposure vulnerability in the platform’s asynchronous modal functionality. The root cause is exposing dangerous methods within the Screen class, enabling an attacker to call arbitrary methods. Clai...

CVE-2023-42494

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function...

Design/Logic Flaw

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function...

CVE-2023-42494 EisBaer Scada - CWE-749: Exposed Dangerous Method or Function

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function...

CVE-2023-42494

Concrete details found: EisBaer Scada is affected by CVE-2023-42494 (CWE-749: Exposed Dangerous Method or Function). The linked PT-2023-6570 entry states the issue involves dangerous methods/functions in the SCADA system and that exploitation may allow a remote attacker to execute arbitrary code;...

CVE-2023-42494: Exposed Dangerous Method or Function

EisBaer Scada - CWE-749: Exposed Dangerous Method or Function...

GSD-2022-1000077 CWE-749 in Dragos version all versions

In RigoBlock Dragos, all versions as of 2022-02-17 and later until a major protocol update is accomplished contain an exposed function CWE-749, specifically setMultipleAllowances which was not set to onlyOwner. The setMultipleAllowances function can be to manipulate tokens with the contract...

GitHub Security Lab: Java: CWE-749 Unsafe resource loading in Android WebView leaking to injection attacks

This bug was reported directly to GitHub Security Lab...

JVN#93167107: Android App "Mercari" (Japan version) vulnerable to arbitrary method execution of Java object

Android App "Mercari" Japan version provided by Mercari, Inc. contains vulnerability which may allow arbitrary Java method execution CWE-749 due to inadequate restrictions on addJavascriptInterface of WebView class. Impact An arbitrary method of a Java object may be executed by a remote attacker...