414 matches found
Vulnerability-Research
🛡️ 취약점 연구 여기에는 제가 발견한 취약점들, 해당 약점의 세부 내용을 담은 분석 글, 그리고 그 영향과 해결 방안에 대한 통찰을 정리해 둡니다. 🏆 배정된 CVE CVE ID| 취약점 제목| 심각도/CVSS| 게시일| 분석 글 ---|---|---|---|--- N.A.| Microsoft Security Response Center MSRC 2026 Q1 보안 연구자 리더보드 192| N/A| Apr 2026| 공식 감사 페이지 N.A.| Microsoft Online Services에 대한 MSRC 보안 연구자 인정...
CVE-2023-43856
Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java...
CVE-2023-43857
Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting XSS vulnerability via the component /admin/u/toIndex...
CVE-2023-45904
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /variable/update...
CVE-2023-45905
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/variable/add...
CVE-2023-45901
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/category/add...
CVE-2023-45903
Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/label/delete...
CVE-2023-4743
A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown function of the file /upload/ueditorConfig?action=config. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The complexity of ...
CVE-2025-1548
A vulnerability was found in iteachyou Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/archives/edit. The manipulation of the argument editorValue/answer/content leads to cross site scripting. The attack can be initiated remotely...
CVE-2025-1543
A vulnerability, which was classified as problematic, has been found in iteachyou Dreamer CMS 4.1.3. This issue affects some unknown processing of the file /resource/js/ueditor-1.4.3.3. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed ...
CVE-2024-2354
A vulnerability, which was classified as problematic, was found in Dreamer CMS 4.1.3. Affected is an unknown function of the file /admin/menu/toEdit. The manipulation of the argument id leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclos...
EUVD-2023-30872
Malicious code in bioql PyPI...
EUVD-2023-50166
Malicious code in bioql PyPI...
EUVD-2023-50167
Malicious code in bioql PyPI...
EUVD-2025-29054
Malicious code in bioql PyPI...
EUVD-2023-52143
Malicious code in bioql PyPI...
EUVD-2023-50168
Malicious code in bioql PyPI...
EUVD-2025-4493
Malicious code in bioql PyPI...