CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

CVE-2025-53077

Samsung DMS (Data Management Server) is affected by CVE-2025-53077, with multiple connected reports describing a set of issues including execution after redirect, deserialization of untrusted data, absolute path traversal, and path traversal that can allow authenticated or unauthenticated actions...

CVE-2025-53077

An execution after redirect in Samsung DMSData Management Server allows attackers to execute limited functions without permissions. An attacker could compromise the integrity of the platform by executing this vulnerability...

PT-2025-31173 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMS Data Management Server affected versions not specified Description: An arbitrary file creation issue exists in Samsung DMS Data Management Server. This allows attackers to create arbitrary files in unintended locations on the...

PT-2025-31172 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMS Data Management Server affected versions not specified Description: An improper limitation of a pathname to a restricted directory 'Path Traversal' exists in Samsung DMS Data Management Server. This allows authenticated attackers ...

PT-2025-31170 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMS Data Management Server affected versions not specified Description: Deserialization of untrusted data in Samsung DMS Data Management Server allows attackers to execute arbitrary code via writing files to the system. Recommendation...

PT-2025-31174 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMS Data Management Server affected versions not specified Description: An arbitrary file deletion issue exists in Samsung DMS Data Management Server. This allows attackers to delete arbitrary files from unintended locations on the...

PT-2025-31169 · Samsung · Samsung Dms

Name of the Vulnerable Software and Affected Versions: Samsung DMS Data Management Server affected versions not specified Description: An execution after redirect in Samsung DMS Data Management Server allows attackers to execute limited functions without permissions. An attacker could compromise...

CVE-2022-47412

Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored persistent, or "Type II" cross-site scripting XSS condition...

CVE-2021-37181

A vulnerability has been identified in Cerberus DMS V4.0 All versions, Cerberus DMS V4.1 All versions, Cerberus DMS V4.2 All versions, Cerberus DMS V5.0 All versions v5.0 QU1, Desigo CC Compact V4.0 All versions, Desigo CC Compact V4.1 All versions, Desigo CC Compact V4.2 All versions, Desigo CC...

BIT-DOLIBARR-2020-13240

The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mechanism against XSS...

BIT-DOLIBARR-2020-13239

The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS...

dms-info.ru Cross Site Scripting vulnerability OBB-3890265

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52098

Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...

Denial of service

Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...

CVE-2023-52098

CVE-2023-52098 describes a Denial of Service (DoS) vulnerability in the DMS module. The NVD entry states a Network-based exploitation with low attack complexity and no privileges required , resulting in an impact to availability (CVSS 3.1 base 7.5, HIGH). The connected records confirm the issue i...

CVE-2023-52098

Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...

CVE-2023-52098

Denial of Service DoS vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability...

Virtual Snipers DMS 1.0 SQL Injection

==================================================================================================================================== | Title : Virtual Snipers DMS v1.0 Auth by pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

dms-net.org Cross Site Scripting vulnerability OBB-3486592

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...