EUVD-2023-30849

Malicious code in bioql PyPI...

CVE-2023-27060

LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

PT-2024-13739 · Unknown · Karlomikus Bar Assistant

Name of the Vulnerable Software and Affected Versions: karlomikus Bar Assistant versions prior to 3.2.0 Description: The issue is related to a Blind Server-Side Request Forgery SSRF vulnerability. It does not validate a parameter before making a request through Image::make, which could allow...

Bar Assistant Security Breach

Bar Assistant is a self-hosted application for managing home bars. A security vulnerability exists in Bar Assistant that stems from not validating parameters before making a request via Image::make, which could lead to arbitrary code execution...

CVE-2023-49471

Blind Server-Side Request Forgery SSRF vulnerability in karlomikus Bar Assistant before version 3.2.0 does not validate a parameter before making a request through Image::make, which could allow authenticated remote attackers to execute arbitrary code...

CVE-2023-27060

LightCMS v1.3.7 was discovered to contain a remote code execution RCE vulnerability via the image:make function...

LightCMS 安全漏洞

Jianhua Sun LightCMS is Jianhua Sun open source an application . Provides a lightweight CMS system can also be used as a general-purpose back-end management framework . LightCMS v1.3.7 version of a security vulnerability , the vulnerability stems from the image: make function has a remote code...