Lucene search
+L

17 matches found

NVD
NVD
added 2026/08/24 4:16 a.m.21 views

CVE-2026-78211

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.01545EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/24 3:32 a.m.13 views

EUVD-2026-64706

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS5.8AI score0.01545EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/24 3:32 a.m.44 views

CVE-2026-78211

4MOSAn GCB Doctor by 4MOSAn Security Technology suffers from an OS Command Injection vulnerability caused by an unremoved ADOdb test page parameter . Unauthenticated remote attackers can exploit this to execute arbitrary system commands on the server, resulting in high impact across confidentiali...

9.8CVSS5.7AI score0.01545EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/24 3:32 a.m.59 views

CVE-2026-78211 4MOSAn Security Technology|4MOSAn GCB Doctor - OS Command Injection

4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server...

9.8CVSS0.01545EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.16 views

PT-2026-79818

Name of the Vulnerable Software and Affected Versions 4MOSAn GCB Doctor affected versions not specified Description An OS Command Injection issue exists where unauthenticated remote attackers can execute arbitrary system commands on the server. This is possible through a parameter in an unremoved...

9.8CVSS5.8AI score0.01545EPSS
SaveExploits0References6
Oracle linux
Oracle linux
added 2026/07/17 12:00 a.m.11 views

giflib security update

5.2.1-25 - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension RHEL-157086 5.2.1-24 - rebuild 5.2.1-23 - fix CVE-2026-23868: double free in GifMakeSavedImage RHEL-154850...

7CVSS5.5AI score0.00618EPSS
SaveExploits1
AlmaLinux
AlmaLinux
added 2026/06/30 12:00 a.m.13 views

Important: giflib security update

giflib is a library for reading and writing gif images. Security Fixes: giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVE-2026-26740 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer ...

8.2CVSS7.5AI score0.00618EPSS
SaveExploits1References4
NVD
NVD
added 2026/03/18 6:16 p.m.18 views

CVE-2026-26740

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...

8.2CVSS0.00618EPSS
SaveExploits1References21
EUVD
EUVD
added 2026/03/17 9:31 a.m.10 views

EUVD-2026-12547

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS5.9AI score0.0045EPSS
SaveExploits0References3
NVD
NVD
added 2026/03/17 8:15 a.m.11 views

CVE-2026-4312

GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...

9.8CVSS0.0045EPSS
SaveExploits0References2
NVD
NVD
added 2021/12/20 3:15 a.m.24 views

CVE-2021-44159

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

10CVSS0.03409EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/12/20 3:10 a.m.55 views

CVE-2021-44159 4MOSAn GCB Doctor - Unrestricted Upload of File

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

9.8CVSS10AI score0.03409EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/20 3:10 a.m.64 views

CVE-2021-44159

CVE-2021-44159 concerns 4MOSAn GCB Doctor’s file upload function, where improper user privilege control allows an unauthenticated remote attacker to upload arbitrary files (including webshells) and potentially execute code, enabling arbitrary system operations or a denial of service. The vulnerab...

10CVSS9.9AI score0.03409EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2021/12/20 12:00 a.m.11 views

4MOSAn GCB Doctor 代码问题漏洞

Radiant Tech 4Mosan Gcb Doctor Government Common Configuration Setup and Detection is Radiant Tech's pipeline for effectively controlling hacking of personal computers and reducing security incidents. A code issue vulnerability exists in 4MOSAn GCB Doctor, which stems from the product's failure t...

10CVSS8.9AI score0.03409EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/19 9:15 a.m.28 views

Authentication flaw

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files...

10CVSS9.9AI score0.05628EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/11/19 9:05 a.m.69 views

CVE-2021-42338

The CVE-2021-42338 entry concerns 4MOSAn GCB Doctor’s login page, where improper validation of a cookie allows an unauthenticated remote attacker to bypass authentication via code injection in the cookie and to arbitrarily manipulate the system or disrupt services by uploading and executing arbit...

10CVSS10AI score0.05628EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/11/19 9:05 a.m.39 views

CVE-2021-42338 4MOSAn GCB Doctor - Improper Authorization

4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files...

9.8CVSS10AI score0.05628EPSS
SaveExploits0References1
Rows per page
Query Builder