99 matches found
CVE-2024-49379
Prueba de Concepto PoC para CVE-2024-49379 Este repositorio contiene una Prueba de Concepto PoC basada en Python para una vulnerabilidad crítica identificada en UmbrelOS. La vulnerabilidad permite Cross-Site Scripting XSS, que puede escalar a Ejecución Remota de Código RCE bajo condiciones...
CVE-2025-14598
CVE-2025-14598 CVSS: 9.8 远程未认证SQL注入导致远程代码执行 执行摘要 在BET e-Portal的登录功能中发现了SQL注入漏洞，该软件解决方案广泛部署于教育机构，用于学生信息和考试成绩管理。该漏洞允许未认证攻击者干扰后端SQL查询，在某些配置下可能升级为远程代码执行。该问题通过CERT/CC协调披露，并被分配了CVE-2025-14598 。 本文档提供该漏洞的技术概述、影响、在不同部署中的表现以及一般修复指南。 受影响产品 产品： BET e-Portal 供应商： BeeS Software Solutions Pvt Ltd 部署环境： BET...
CVE-2026-41462
🚨 CVE-2026-41462 - Inyección SQL no autenticada en ProjeQtor Inyección SQL crítica no autenticada en ProjeQtor ≤ 12.4.3 📌 Resumen CVE-2026-41462 es una vulnerabilidad crítica de inyección SQL no autenticada en la funcionalidad de inicio de sesión de la herramienta de gestión de proyectos ProjeQto...
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...
CVE-2026-33920
CVE-2026-33920 affects the login functionality of Nozomi Networks Guardian/CMC (versions before 26.3.0 ). The root cause is a missing validation of the anti-CSRF token in both standard and SAML login flows. An attacker holding a valid account can coerce a victim into unknowingly authenticating wi...
EUVD-2026-72789
A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...
CVE-2025-69245
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2025-69245 Reflected XSS in Raytha CMS
Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality. An attacker can craft a malicious URL which, when opened by the authenticated victim, results in arbitrary JavaScript execution in the victim’s browser. This issue was fixed in 1.4.6...
CVE-2026-26722
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality...
CVE-2026-26722
An issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote attacker to escalate privileges via PIN component of the login functionality...
CVE-2025-14598 CVE-2025-14598
BeeS Software Solutions BET Portal contains an SQL injection vulnerability in the login functionality of affected sites. The vulnerability enables arbitrary SQL commands to be executed on the backend database...
CVE-2024-39608
A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability...
EUVD-2008-6901
Malware in sbrugna...
EUVD-2018-20422
Malware in sbrugna...
EUVD-2020-30210
Malware in sbrugna...
EUVD-2020-26940
Malware in sbrugna...