3094 matches found
Exploit for Path Traversal in Rarlab Winrar
WinRAR Exploit Tool - Rust Edition Advanced WinRAR Path T...
CVE-2025-50428
In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script. The vulnerability is due to improper sanitizing of user input passed via the interface parameter...
Linux Distros Unpatched Vulnerability : CVE-2017-18021
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only appli...
Linux Distros Unpatched Vulnerability : CVE-2021-33500
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PuTTY before 0.75 on Windows allows remote servers to cause a denial of service Windows GUI hang by telling the PuTTY window to change its title repeatedly at...
CVE-2025-41702
The CVE-2025-41702 entry concerns hard-coded JWT signing key in the egOS WebGUI backend, enabling an unauthenticated remote attacker to forge valid HS256 tokens and bypass authentication/authorization. Affected software includes egOS WebGUI-based gateways (examples cited: Welotec EG400Mk2/EG500Mk...
CVE-2025-20131 Cisco Identity Services Engine Arbitrary File Upload Vulnerability
A vulnerability in the GUI of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to improper validation of the file copy function. An attacker could exploit this...
Cisco Identity Services Engine (cisco-sa-ise-file-upload-qksX6C8g)
According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the GUI of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker with administrative privileges to upload files to an affected device. This vulnerability is due to...
CVE-2025-36088 IBM TS4500 cross-site scripting
IBM TS4500 1.11.0.0-D00, 1.11.0.1-C00, 1.11.0.2-C00, and 1.10.00-F00 web GUI is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosu...
Malicious code in ixordocs-portal-gui (npm)
The package ixordocs-portal-gui was found to contain malicious code...
Malicious code in @zalastax/nolb-_gui (npm)
The package @zalastax/nolb-gui was found to contain malicious code...
Malicious code in acerta-calendar-gui (npm)
The package acerta-calendar-gui was found to contain malicious code...
Malicious code in dct-admin-gui (npm)
The package dct-admin-gui was found to contain malicious code...
Malicious code in edcm-gui (npm)
The package edcm-gui was found to contain malicious code...
Malicious code in dev-gui-client (npm)
The package dev-gui-client was found to contain malicious code...
MAL-2025-18108 Malicious code in dct-admin-gui (npm)
The package dct-admin-gui was found to contain malicious code...
MAL-2025-19216 Malicious code in edcm-gui (npm)
The package edcm-gui was found to contain malicious code...
MAL-2025-18343 Malicious code in dev-gui-client (npm)
The package dev-gui-client was found to contain malicious code...
MAL-2025-13993 Malicious code in acerta-calendar-gui (npm)
The package acerta-calendar-gui was found to contain malicious code...