EUVD-2022-35273

Malicious code in bioql PyPI...

EUVD-2022-32544

Malicious code in bioql PyPI...

ELADMIN 安全漏洞

ELADMIN is a backend management system for elunez Personal Developer. A security vulnerability exists in ELADMIN v2.7 and earlier versions, which stems from vulnerability to a server-side request forgery SSRF attack that allows an attacker to execute arbitrary code via the DatabaseController.java...

CVE-2022-30058

Shopwind =v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php...

CVE-2022-28059

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

CVE-2022-28059

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

CVE-2022-28059

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

Arbitrary file deletion

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

CVE-2022-28059

Verydows v2.0 was discovered to contain an arbitrary file deletion vulnerability via \backend\databasecontroller.php...

CVE-2022-28059

CVE-2022-28059 affects Verydows v2.0 with an arbitrary file deletion vulnerability via \backend\database_controller.php. Connected documents confirm the same flaw across sources, stating an attacker can delete arbitrary files through the referenced path. CVSSv3.1 vectors indicate network access, ...

Remote Code Execution (RCE)

parse-server is vulnerable to remote code execution. The vulnerability exists in DatabaseController.js due to a prototype pollution which allows an attacker to inject and execute arbitrary codes...

XYHCMS V3.2 SQL Injection Vulnerability in DatabaseController.class.php Page

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYHCMS V3.2 DatabaseController.class.php page SQL injection vulnerability. The vulnerability due to the system $ tables parameter does not filter the data submitted by the user , a remote attacker can exploit the...