Lucene search
+L

24 matches found

NVD
NVD
•added 2026/08/24 4:16 a.m.•28 views

CVE-2026-78211

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.02043EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/24 3:32 a.m.•23 views

EUVD-2026-64706

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS5.8AI score0.02043EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/24 3:32 a.m.•71 views

CVE-2026-78211

4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...

9.8CVSS6AI score0.02043EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/24 3:32 a.m.•68 views

CVE-2026-78211 4MOSAn Security Technology|4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.02043EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/24 3:32 a.m.•14 views

CVE-2026-78211 4MOSAn Security Technology|4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS6AI score0.02043EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/24 12:00 a.m.•3 views

CVE-2026-78211: Improper Neutralization of Special Elements used in an OS Command

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS6AI score0.02043EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/24 12:00 a.m.•27 views

PT-2026-79818

Name of the Vulnerable Software and Affected Versions 4MOSAn GCB Doctor affected versions not specified Description An OS Command Injection issue exists where unauthenticated remote attackers can execute arbitrary system commands on the server. This is possible through a parameter in an unremoved...

9.8CVSS5.8AI score0.02043EPSS
SaveExploits0References6
Oracle linux
Oracle linux
•added 2026/07/17 12:00 a.m.•18 views

giflib security update

5.2.1-25 - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension RHEL-157086 5.2.1-24 - rebuild 5.2.1-23 - fix CVE-2026-23868: double free in GifMakeSavedImage RHEL-154850...

7CVSS7.1AI score0.01029EPSS
SaveExploits1
AlmaLinux
AlmaLinux
•added 2026/06/30 12:00 a.m.•20 views

Important: giflib security update

giflib is a library for reading and writing gif images. Security Fixes: giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVE-2026-26740 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...

8.2CVSS6.9AI score0.01029EPSS
SaveExploits1References4
NVD
NVD
•added 2026/03/18 6:16 p.m.•26 views

CVE-2026-26740

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...

8.2CVSS0.01029EPSS
SaveExploits1References21
EUVD
EUVD
•added 2026/03/17 9:31 a.m.•19 views

EUVD-2026-12547

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.00799EPSS
SaveExploits0References3
NVD
NVD
•added 2026/03/17 8:15 a.m.•17 views

CVE-2026-4312

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS0.00799EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/17 12:00 a.m.•5 views

CVE-2026-4312: Missing Authentication for Critical Function

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.00799EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/03/17 12:00 a.m.•5 views

PT-2026-25875

Name of the Vulnerable Software and Affected Versions DrangSoft GCB/FCB Audit Software affected versions not specified Description The software contains a missing authentication issue, allowing unauthenticated remote attackers to access certain APIs. This access enables the creation of new...

9.8CVSS5.9AI score0.00799EPSS
SaveExploits0References11
NVD
NVD
•added 2021/12/20 3:15 a.m.•30 views

CVE-2021-44159

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

10CVSS0.03409EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/12/20 3:10 a.m.•61 views

CVE-2021-44159 4MOSAn GCB Doctor - Unrestricted Upload of File

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

9.8CVSS10AI score0.03409EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/20 3:10 a.m.•71 views

CVE-2021-44159

CVE-2021-44159 concerns 4MOSAn GCB Doctor’s file upload function, where improper user privilege control allows an unauthenticated remote attacker to upload arbitrary files (including webshells) and potentially execute code, enabling arbitrary system operations or a denial of service. The vulnerab...

10CVSS9.9AI score0.03409EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/12/20 12:00 a.m.•4 views

PT-2021-24053

Name of the Vulnerable Software and Affected Versions: 4MOSAn GCB Doctor affected versions not specified Description: The issue is related to improper user privilege control in the file upload function. A remote attacker can upload arbitrary files, including webshell files, without authentication...

10CVSS0.03409EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/12/20 12:00 a.m.•17 views

4MOSAn GCB Doctor 代码问题漏洞

Radiant Tech 4Mosan Gcb Doctor Government Common Configuration Setup and Detection is Radiant Tech's pipeline for effectively controlling hacking of personal computers and reducing security incidents. A code issue vulnerability exists in 4MOSAn GCB Doctor, which stems from the product's failure t...

10CVSS8.9AI score0.03409EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/20 12:00 a.m.•5 views

CVE-2021-44159: Unrestricted Upload of File with Dangerous Type

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

10CVSS6.3AI score0.03409EPSS
SaveExploits0References2
Rows per page
Query Builder