CVE-2023-26922

SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...

CVE-2023-26922

SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...

Sql injection

SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...

CVE-2023-26922

SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...

CVE-2023-26922

SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shellexect parameter to the \www\pages\matrix-gui-2.0 endpoint...

CVE-2023-26922

Varisicte matrix-gui v2 contains an SQL injection in the shell_exect parameter of the /www/pages/matrix-gui-2.0 endpoint, enabling remote code execution. CVE-2023-26922 is rated CVSS v3.1 for Network, 9.8 (CRITICAL). The connected documents corroborate the vulnerability description; no patch/vers...

Varisicte matrix-gui SQL注入漏洞

matrix-gui is a Variscite open source application. A security vulnerability exists in Varisicte matrix-gui v.2, which stems from the presence of a SQL injection vulnerability that can be exploited by remote attackers to execute arbitrary code...

Fedora: Security Advisory for plasma-discover (FEDORA-2023-e31c3e4b6c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in py-guireplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c0ed8f7bfbdf973bf5a00a0c408bcb3e6b04e435cc02a92bd5f3e541df3e8ce8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

[SECURITY] Fedora 37 Update: plasma-discover-5.27.1-2.fc37

KDE and Plasma resources management GUI...

Security Bulletin: Vulnerability in sqlite affects IBM VM Recovery Manager DR GUI

Summary There is vulnerability in sqlite opensource package which affects IBM VM Recovery Manager HA and DR GUI. No impacts to VM Recovery Manager HA and DR cli. Vulnerability Details CVEID:CVE-2022-21227 DESCRIPTION: Node.js sqlite3 module is vulnerable to a denial of service, caused by improper...

CVE-2022-43873

An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847...

CVE-2022-43873

CVE-2022-43873 affects IBM Spectrum Virtualize GUI (versions 8.2–8.5). An authenticated user can execute code and escalate privileges on the system due to a GUI vulnerability. IBM and Red Hat attest to a privilege-escalation impact with a CVSS-derived high/medium range and list concrete remediati...

CVE-2022-43873 IBM Spectrum Virtualize privilege escalation

An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system. IBM X-Force ID: 239847...

PT-2023-12967 · Unknown · Pfsense Ce +1

Name of the Vulnerable Software and Affected Versions: pfSense CE versions 2.6.0 and earlier pfSense Plus versions prior to 22.05 Description: The issue allows for XSS in the WebGUI via URL Table Alias URL parameters. This means an attacker could potentially inject malicious scripts into the web...

CVE-2023-26234

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

CVE-2023-26235

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

Deserialization of untrusted data

JD-GUI 1.6.6 allows deserialization via UIMainWindowPreferencesProvider.singleInstance...

Design/Logic Flaw

JD-GUI 1.6.6 allows XSS via util/net/InterProcessCommunicationUtil.java...

JD-GUI 代码问题漏洞

JD-GUI is a Java Decompiler open source independent graphical utility . Displays the Java source code in a CLASS file. A security vulnerability exists in JD-GUI version 1.6.6, which originated when the program allowed an attacker to deserialize it via UIMainWindowPreferencesProvider.singleInstanc...