ChuanhuChatGPT Security Vulnerability

ChuanhuChatGPT is a lightweight and easy-to-use Web GUI for ChatGPT/ChatGLM/LLaMA/StableLM/MOSS and many other LLMs. A security vulnerability exists in ChuanhuChatGPT, which stems from a lack of cleanup or validation of the keyword parameter, and a denial of service vulnerability in the...

PT-2024-28368 · Idccms · Idccms

Name of the Vulnerable Software and Affected Versions: idccms version 1.35 Description: The issue is related to a Cross-Site Request Forgery CSRF that affects the /admin/keyWord deal.php component when the mudi parameter is set to add. This allows for unauthorized requests to be made on behalf of...

idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in idcCMS v1.35, which originates from the component...

Exploit for CVE-2024-37791

CVE-2024-37791 CVE-2024-37791 项目地址： 准备工作： 登入后台-获取co...

CVE-2024-37791

DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...

CVE-2024-37791

DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...

PT-2024-27753 · Duxcms3 · Duxcms3

Name of the Vulnerable Software and Affected Versions: DuxCMS3 version 3.1.3 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the keyword parameter at the "/article/Content/index?class id" API endpoint. Recommendations: For DuxCMS3 versio...

CVE-2024-37791

DuxCMS3.1.3 is vulnerable to SQL injection via the keyword parameter in /article/Content/index?class_id. The connected exploit details show time-based blind injection using LIKE and unfiltered $value, with payloads that retrieve database name and can delay execution (sleep(1/3)) to confirm exploi...

CVE-2024-37791

DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...

CVE-2024-37791

DuxCMS3 v3.1.3 was discovered to contain a SQL injection vulnerability via the keyword parameter at /article/Content/index?classid...

DuxCMS SQL Injection Vulnerability

DuxCMS is an open source content management system. A SQL injection vulnerability exists in DuxCMS version v3.1.3, which originates from the keyword parameter in /article/Content/index?classid contains a SQL injection vulnerability...

RHEL 6 : openldap (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - openldap: incorrect multi-keyword mode cipherstring parsing CVE-2015-3276 -...

PT-2024-20982 · Ruvaroa · Ruvaroa

Name of the Vulnerable Software and Affected Versions: RuvarOA versions 6.01 through 12.01 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the txt keyword parameter at the "get company.aspx" endpoint. Recommendations: For versions 6.01...

RuvarOA 安全漏洞

RuvarOA is an office automation system of Ruvar China. A SQL injection vulnerability exists in RuvarOA v6.01 and v12.01, which is caused by the lack of validation of the txtkeyword parameter of the getcompany.aspx file against externally entered SQL statements. An attacker can exploit this...

CVE-2024-27752

Cross Site Scripting vulnerability in CSZ CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the Default Keyword field in the settings function...

PT-2024-22024 · Csz Cms · Csz Cms

Name of the Vulnerable Software and Affected Versions: CSZ CMS version 1.3.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the Default Keyword field in the settings function. Recommendations: For CSZ CMS version 1.3.0, update the software to a...

CSZ CMS 安全漏洞

CSZ CMS is an open source PHP-based content management system CMS. A security vulnerability exists in CSZ CMS version v.1.3.0, which stems from the presence of a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the Default Keyword field...

CVE-2024-27752

CSZ CMS v1.3.0 exposes a Cross Site Scripting (XSS) vulnerability that allows a remote attacker to execute arbitrary code via the Default Keyword field in the settings function . The CVSSv3.1 base score is 5.4 (Medium) with network attack vector, low to moderate complexity, and user interaction r...

PT-2024-24647 · WordPress · Seerox Wp Dynamic Keywords Injector

Name of the Vulnerable Software and Affected Versions: Seerox WP Dynamic Keywords Injector versions prior to 2.3.19 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations:...

Search Keyword Redirect <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting

Description The Search Keyword Redirect plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...