15964 matches found
CVE-2024-31680
The Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 is vulnerable to a File Upload flaw in the my_parser.php component. This vulnerability allows a local attacker to execute arbitrary code on the system. To mitigate this risk, it is recommended to disable the my_par...
CVE-2020-22539
An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-28556
SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin-manage-user.php...
CVE-2024-28558
SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/webcrud.php...
CVE-2024-26023
An OS command injection vulnerability (CWE-78) exists in BUFFALO wireless LAN routers , allowing a logged-in user to execute arbitrary OS commands. Affected models and versions include WCR-1166DS (Ver. 1.32 and earlier), WSR-1166DHP (Ver. 1.14 and earlier), WSR-1166DHP2 (Ver. 1.14 and earlier), W...
CVE-2020-22539
Codoforum v4.9 is vulnerable to an arbitrary file upload vulnerability within the Add Category function. This flaw allows an attacker to execute arbitrary code by uploading a specially crafted file. To mitigate the risk, it is recommended to disable the Add Category function until a formal patch ...
CVE-2020-22539
An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2024-28718
An issue in OpenStack magnum yoga-eom version allows a remote attacker to execute arbitrary code via the certmanager.py. component...
QEMU Resource Management Error Vulnerability (CNVD-2024-20282)
QEMU Quick Emulator is a set of simulation processor software. The software is fast and cross-platform. A resource management error vulnerability exists in QEMU virtio, which stems from a double-release vulnerability in virtio-gpu, virtio-serial-bus, and virtio-crypto, with an insufficient...
CVE-2023-48865
An issue discovered in Reportico Till 8.1.0 allows attackers to obtain sensitive information via executemode parameter of the URL...
CVE-2024-30885
Reflected Cross-Site Scripting XSS vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component...
PT-2024-13656 · Reportico · Reportico
Name of the Vulnerable Software and Affected Versions: Reportico versions prior to 8.1.0 Description: An issue in Reportico allows attackers to obtain sensitive information via the execute mode parameter of the URL. Recommendations: For versions prior to 8.1.0, update to version 8.1.0 or later to...
Reportico 安全漏洞
Reportico is an open source PHP report designer from the individual developer Peter Deed. A security vulnerability exists in Reportico version 8.1.0 that originates from allowing an attacker to obtain sensitive information via the executemode parameter of a URL...
CVE-2024-31492
An external control of file name or path vulnerability CWE-73 in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process...
CVE-2023-50347 Insecure SQL Interface affects HCL DRYiCE MyXalytics
HCL DRYiCE MyXalytics is impacted by an insecure SQL interface vulnerability, potentially giving an attacker the ability to execute custom SQL queries. A malicious user can run arbitrary SQL commands including changing system configuration...
CVE-2024-30729
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-30715
CVE-2024-30715 is rejected/not used; this entry does not represent an active vulnerability.
PT-2024-18163 · Unknown · Parisneo/Lollms-Webui
Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui affected versions not specified Description: The issue arises due to inadequate sanitization and validation of model output data, allowing an attacker to inject malicious JavaScript code. This code can be executed within...
Vulnerabilities fixed in Microsoft Defender for IoT
Microsoft has fixed vulnerabilities in Defender for IoT. A malicious party can exploit the vulnerabilities to afford elevated permissions and execute arbitrary code with permissions of the process. Microsoft has made updates available that fix the described vulnerabilities described. We recommend...