CVE-2024-55093

phpIPAM through 1.7.3 has a reflected Cross-Site Scripting XSS vulnerability in the install scripts...

CVE-2024-55093

phpIPAM through 1.7.3 has a reflected Cross-Site Scripting XSS vulnerability in the install scripts...

CVE-2024-55093

phpIPAM 1.7.3 has a reflected XSS vulnerability in the install scripts. The provided documents do not include exploitation details or a remediation/version fix.

CVE-2024-55093

phpIPAM through 1.7.3 has a reflected Cross-Site Scripting XSS vulnerability in the install scripts...

CVE-2024-55093

phpIPAM through 1.7.3 has a reflected Cross-Site Scripting XSS vulnerability in the install scripts...

WatchGuard Mobile VPN 安全漏洞

WatchGuard Mobile VPN is a VPN application from WatchGuard USA. A security vulnerability exists in WatchGuard Mobile VPN versions 11.0 through 12.11 that stems from improperly configured directory permissions during a non-default directory installation, which could lead to an authenticated local...

WatchGuard Terminal Services Agent 安全漏洞

WatchGuard Terminal Services Agent is a terminal agent service from WatchGuard USA. A security vulnerability exists in WatchGuard Terminal Services Agent versions 12.0 through 12.10, which stems from improperly configured directory permissions during a non-default directory installation, which...

Ubuntu: Security Advisory (USN-7373-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tiny MoxieManager 安全漏洞

Tiny MoxieManager is an application from Tiny Inc. NET for managing all media files in PHP and . A security vulnerability exists in Tiny MoxieManager versions prior to 4.0.0 that stems from a remote code execution that can occur in the install command and allow an unauthenticated attacker to inje...

WBCE-v1.6.3-Authenticated-RCE

WBCE CMS printerror$MESSAGE'GENERICINVALIDADDONFILE';...

Fedora: Security Advisory (FEDORA-2025-34c88263fe)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows - NTLM Hash Leak Malicious Windows Theme

Exploit Title: CVE-2024-21320 - NTLM Hash Leak via Malicious Windows Theme Date: 02/03/2025 Exploit Author: Abinesh Kamal K U CVE : CVE-2024-21320 Ref: https://www.cve.org/CVERecord?id=CVE-2024-21320 Step 1: Install Responder Responder is a tool to capture NTLM hashes over SMB. git clone...

Deserialization of Untrusted Data

Overview InvokeAI is an An implementation of Stable Diffusion which provides various new features and options to aid the image generation process Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the /api/v2/models/install API. An attacker can execute...

Debian: Security Advisory (DSA-5882-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Missing Critical Step in Authentication

Overview lollms is a python library for AI personality definition Affected versions of this package are vulnerable to Missing Critical Step in Authentication due to a missing checkaccess call in the installbinding function. An attacker can add, modify, and remove bindings by accessing the...

LoLLMs Web UI 安全漏洞

LoLLMs Web UI is a web user interface for large languages and multimodal systems by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs Web UI version V12, which stems from the install and uninstall API endpoints not being adequately cleaned of user input,...

CVE-2024-47573

An improper validation of integrity check value vulnerability CWE-354 in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted...

openSUSE Security Advisory (openSUSE-SU-2025:0090-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fortinet FortiClientMAC 安全漏洞

Fortinet FortiClientMAC is a U.S. fly tower Fortinet company based on macOS platform security tools. A code execution vulnerability exists in Fortinet FortiClientMAC that originates from an external control of a file name or path, which can be exploited by a local attacker to execute arbitrary co...

Debian: Security Advisory (DLA-4084-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...