CVE-2025-15154: Use of Less Trusted Source

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

PT-2019-8313

Name of the Vulnerable Software and Affected Versions NETGEAR ReadyNAS Surveillance versions prior to 1.4.3-17 x86 NETGEAR ReadyNAS Surveillance versions prior to 1.1.4-7 ARM Description The issue arises from the fact that the uploaddir variable, obtained from $ GET'uploaddir', is not properly...

PT-2019-19850

Name of the Vulnerable Software and Affected Versions TONGDA Office Anywhere version 10.18.190121 Description A SQL Injection issue was discovered. The vulnerability can be exploited via the run id parameter in the "general/approve center/list/input form/work handle.php" API endpoint...

PT-2018-13166

Name of the Vulnerable Software and Affected Versions NUUO NVRMini2 version 3.9.1 Description The issue allows for authenticated remote command injection. An attacker can send crafted requests to the "upgrade handle.php" endpoint to execute OS commands as root. Recommendations For NUUO NVRMini2...

TerraMaster TOS Cross-Site Scripting Vulnerability (CNVD-2019-00657)

TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization. A cross-site scripting vulnerability exists in the handle.php endpoint in TerraMaste...

CVE-2018-13334

Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "optionssysname" parameter...

CVE-2018-13334

Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "optionssysname" parameter...

Cross site scripting

Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "optionssysname" parameter...

PT-2018-11758

Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue concerns cross-site scripting in the handle.php file, allowing attackers to execute JavaScript. This is achieved via the optionssysname parameter. Recommendations For TerraMaster TOS version...

CVE-2018-13334: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "optionssysname" parameter...

E-Pay RFI Vulnerability

No description provided by source. ======================================================================================== | Title : E-Pay RFI Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web...