Malicious code in dream_bivfx_1zy7z_maple (npm)

The package dreambivfx1zy7zmaple was found to contain malicious code...

Malicious code in dice-dream-millions-win (npm)

The package dice-dream-millions-win was found to contain malicious code...

MAL-2025-18716 Malicious code in down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy (npm)

The package down-load-available-zip-now-working-on-a-dream-i6op6-jjzcyy was found to contain malicious code...

Malicious code in test-mlw2-dream-whaup (npm)

The package test-mlw2-dream-whaup was found to contain malicious code...

MAL-2025-35228 Malicious code in test-mlw2-dream-whaup (npm)

The package test-mlw2-dream-whaup was found to contain malicious code...

MAL-2025-18442 Malicious code in dice-dream-free-rolls (npm)

The package dice-dream-free-rolls was found to contain malicious code...

MAL-2025-18443 Malicious code in dice-dream-millions-win (npm)

The package dice-dream-millions-win was found to contain malicious code...

CVE-2024-30656

An issue in Fireboltt Dream Wristphone BSW202FBAACv2.020240110-20240110-1956 allows attackers to cause a Denial of Service DoS via a crafted deauth frame...

CVE-2024-6618

In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library DLL...

CVE-2024-6619

In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could cause a denial-of-service...

CVE-2023-28361

A Cross-site WebSocket Hijacking CSWSH vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a malicious webpage.Affected Products:Cloud Key Gen2Cloud Key Gen2 PlusUNVRUNVR ProfessionalUDMUDM...

CVE-2023-32123

Cross-Site Request Forgery CSRF vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3...

CVE-2023-24104

Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets...

CVE-2023-2220

A vulnerability was found in Dream Technology mica up to 3.0.5. It has been classified as problematic. Affected is an unknown function of the component Form Object Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. VDB-226986 is the identifier...

CVE-2022-20504

In multiple locations of DreamManagerService.java, there is a missing permission check. This could lead to local escalation of privilege and dismissal of system dialogs with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Andro...

CVE-2021-21957

A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability...

lmxcms 安全漏洞

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. A security vulnerability exists in lmxcms version 1.41, which originates from SQL injection due to incorrect operation of the parameter sortid in the file cadminx005fx001atAction.class.php...

lmxcms 注入漏洞

lmxcms dream cms is a website builder from China Dream Cms lmxcms company. An injection vulnerability exists in lmxcms version 1.41, which originates from the file db.inc.php of the component Maintenance that can lead to code injection...

CVE-2024-13331

The WP Dream Carousel WordPress plugin through 1.0.1b does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2020-13533

A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attackers to effectively ‘backdoor’ the installation files and escalate privileges when a new user logs...