Lucene search
+L

8 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•16 views

CVE-2026-94139: Improper Neutralization of Special Elements used in a Command

A weakness has been identified in Chengdu Feiyuxing Technology Feiyu Star Router B-MB5E202-210322-r11656. Affected is an unknown function of the file /sendorder.cgi?parameter=loginout of the component Cookie Handler. This manipulation of the argument sessionid causes command injection. Remote...

7.4CVSS7AI score0.01158EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/10/25 12:00 a.m.•6 views

PT-2024-16227

Name of the Vulnerable Software and Affected Versions WP-Members Membership Plugin versions up to, and including, 3.4.9.5 Description The issue is related to Stored Cross-Site Scripting via the plugin's wpmem loginout shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS6.1AI score0.0045EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2024/10/25 12:00 a.m.•18 views

WordPress plugin WP-Members Membership Plugin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

6.4CVSS5.9AI score0.0045EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/18 12:00 a.m.•33 views

Sangfor NGAF File Code Execution

The vulnerability of the /LogInOut.php file in the Sangfor NGAF firewall lies in the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP POST request remotely...

10CVSS8.2AI score0.64974EPSS
SaveExploits1References6Affected Software1
osv_cve
osv_cve
•added 2023/10/10 3:15 p.m.•19 views

CVE-2023-30805

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling ...

9.8CVSS6.1AI score0.64974EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/10/10 12:00 a.m.•25 views

Sangfor Next-Gen Application Firewall Operating System Command Injection Vulnerability

Sangfor Next-Gen Application Firewall Sangfor NGAF is an application firewall from China-based Sangfor. A security vulnerability exists in Sangfor Next-Gen Application Firewall NGAF version 8.0.17, which originates from an operating system command injection vulnerability. The vulnerability can be...

9.8CVSS8.1AI score0.64974EPSS
SaveExploits1References5
myhack58
myhack58
•added 2012/11/30 12:00 a.m.•20 views

Amoy Empire system background cookie spoofing vulnerability and the background to get shell-vulnerability warning-the black bar safety net

The accidental discovery of Amoy Empire free version of the background can be a cookie trick Tools: the Veteran's cookies'cheat tool Keywords: classification - Mall - brand - woman - man - beauty - shoes and bags - digital - home - food First open the tool the cookie to COOKIEadminuser=admin;...

7.2AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/09/12 12:00 a.m.•5 views

CVE-1999-1558: Undefined Security Weakness

Vulnerability in loginout in Digital OpenVMS 7.1 and earlier allows unauthorized access when external authentication is enabled...

7.5CVSS5.8AI score0.01369EPSS
SaveExploits0References1
Rows per page
Query Builder