160 matches found
CVE-2025-46101: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Beakon Software Beakon Learning Management System Sharable Content Object Reference Model SCORM version before 5.4.3 allows a remote attacker to obtain sensitive information via the ks parameter in jsonscorm.php file...
PT-2025-41789
Уязвимость веб-интерфейса веб-сервера ЭЛАРА Эликонт-КС связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код...
PT-2025-41790
Уязвимость веб-интерфейса веб-сервера ЭЛАРА Эликонт-КС связана с отсутствием фильтрации передаваемого клиентом пути. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить несанкционированный доступ к защищаемой информации...
CVE-2024-11491
A vulnerability was found in 115cms up to 20240807. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php/admin/web/useradmin.html. The manipulation of the argument ks leads to cross site scripting. The attack may be launched remotely. The...
115cms 代码注入漏洞
115cms is a multi-module intelligent website builder from Guizhou Forxin Technology 115cms Company in China. A code injection vulnerability exists in 115cms version 20240807 and earlier versions, which stems from an incorrect operation of the parameter ks that can lead to cross-site scripting...
115cms 代码注入漏洞
115cms is a multi-module intelligent website builder from Guizhou Forxin Technology 115cms Company in China. A code injection vulnerability exists in 115cms version 20240807 and earlier versions, which stems from an incorrect operation of the parameter ks that can lead to cross-site scripting...
PT-2024-17027 · 115Cms · 115Cms
Name of the Vulnerable Software and Affected Versions: 115cms up to 20240807 Description: A vulnerability was found in an unknown function of the file /index.php/admin/web/file.html, which can be exploited to launch a cross-site scripting attack remotely by manipulating the ks argument. The explo...
PT-2024-17030 · 115Cms · 115Cms
Name of the Vulnerable Software and Affected Versions: 115cms versions up to 20240807 Description: A vulnerability was found in some unknown functionality of the file /index.php/admin/web/useradmin.html. The manipulation of the ks argument leads to cross-site scripting. The attack may be launched...
CVE-2024-11491: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in 115cms up to 20240807. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php/admin/web/useradmin.html. The manipulation of the argument ks leads to cross site scripting. The attack may be launched remotely. The...
CVE-2024-11489: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in 115cms up to 20240807. It has been classified as problematic. Affected is an unknown function of the file /index.php/admin/web/file.html. The manipulation of the argument ks leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...
PT-2024-17026 · 115Cms · 115Cms
Name of the Vulnerable Software and Affected Versions: 115cms versions up to 20240807 Description: A vulnerability was found in the processing of the file /app/admin/view/web user.html, where the manipulation of the argument ks leads to cross-site scripting. The attack may be initiated remotely...
CVE-2024-11488: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in 115cms up to 20240807 and classified as problematic. This issue affects some unknown processing of the file /app/admin/view/webuser.html. The manipulation of the argument ks leads to cross site scripting. The attack may be initiated remotely. The exploit has been...
DEBIAN-CVE-2024-47756
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in kspciequirk This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition...
UBUNTU-CVE-2024-47756
In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Fix if-statement expression in kspciequirk This code accidentally uses && where || was intended. It potentially results in a NULL dereference. Thus, fix the if-statement expression to use the correct condition...
PT-2024-32799
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A critical vulnerability in the Linux kernel's PCI keystone component has been fixed. The issue involved the ks pcie quirk function, where an if-statement expression accidentally used && instea...
Malware in get-new-script-elden-ring-trainer-c-h-e-a-ts-h-a-c-ks-k1ciug
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malware in updated-today-gen-apex-legends-h-a-c-ks-f-r-e-e-glow-and-aimb-ot-safe-to-use-2023-ms0sfd
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in @ks-radar/search (npm)
--- -= Per source details. Do not edit below this line.=-...