novel-plus 安全漏洞

novel-plus 小说精品屋-plus is a multi-end PC, WAP reading, full-featured original literature CMS system. A security vulnerability exists in novel-plus version 4.3.0 and earlier, which stems from an arbitrary file read vulnerability that allows remote attackers to obtain sensitive information via a...

PT-2024-25208 · Unknown · Springblade

Name of the Vulnerable Software and Affected Versions: SpringBlade version 3.7.1 Description: An issue in SpringBlade allows attackers to obtain sensitive information via a crafted GET request to the "api/blade-system/tenant" endpoint. The api/blade-system/tenant endpoint is vulnerable to this...

CVE-2024-33383

The novel-plus (novel-plus 小说精品屋-plus) content management system, version 4.3.0 and earlier , is vulnerable to an Arbitrary File Read vulnerability. A remote attacker can exploit this by sending a crafted GET request using the filePath parameter to obtain sensitive information from the server. As...

CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

CVE-2024-33383

Arbitrary File Read vulnerability in novel-plus 4.3.0 and before allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter...

CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

CVE-2024-33332

An issue discovered in SpringBlade 3.7.1 allows attackers to obtain sensitive information via crafted GET request to api/blade-system/tenant...

CVE-2024-33332

A security vulnerability exists in SpringBlade version 3.7.1 , a microservice development platform. Attackers can exploit this issue by sending a crafted GET request to the api/blade-system/tenant endpoint, which allows them to obtain sensitive information . The vulnerability is associated with C...

PT-2024-25226

Name of the Vulnerable Software and Affected Versions novel-plus versions 4.3.0 and earlier Description The issue allows a remote attacker to obtain sensitive information via a crafted GET request using the filePath parameter. This enables the attacker to read arbitrary files, potentially leading...

CVE-2023-31889

An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request...

ASUS RT-AC51U 安全漏洞

The ASUS RT-AC51U is a wireless router from Asus China. A security vulnerability exists in ASUS RT-AC51U 3.0.0.4.380.8591 and earlier versions, which originates from a vulnerability that allows a local attacker to cause a denial of service via a crafted GET request...

CVE-2023-31889

The httpd service in ASUS RT-AC51U routers with firmware versions up to and including 3.0.0.4.380.8591 is vulnerable to a denial of service (DoS) attack. A local attacker can trigger this condition by sending a crafted GET request , which leads to uncontrolled resource consumption (CWE-400). As a...

CVE-2023-31889

An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request...

CVE-2023-31889

An issue discovered in httpd in ASUS RT-AC51U with firmware version up to and including 3.0.0.4.380.8591 allows local attackers to cause a denial of service via crafted GET request...

VulnCheck KEV: CVE-2024-28734

Cross Site Scripting vulnerability in Unit4 Financials by Coda prior to 2023Q4 allows a remote attacker to run arbitrary code via a crafted GET request using the cols parameter...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-31551: Path Traversal: '/dir/../filename'

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-31551

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request...

CVE-2024-31551

The cmseasy content management system (CMS) version v7.7.7.9 20240105 is affected by a Directory Traversal vulnerability in the lib/admin/image.admin.php file. An unauthenticated attacker can exploit this flaw by sending a crafted GET request to delete arbitrary files on the server. As of the cur...

The vulnerability of the CGI script nas_sharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L NAS devices allows a hacker to execute arbitrary code.

The vulnerability of the CGI script nassharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L device operating systems is related to the use of pre-installed user accounts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted...