CVE-2024-4904 Byzoro Smart S200 Management Platform userattestation.php unrestricted upload

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be initiated...

CVE-2024-4904 Byzoro Smart S200 Management Platform userattestation.php unrestricted upload

A vulnerability was found in Byzoro Smart S200 Management Platform up to 20240507. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be initiated...

Baizhuo Network Smart s200 Management Platform 代码问题漏洞

Baizhuo Network Smart s200 Management Platform is a network management platform from Baizhuo, China. A code issue vulnerability exists in Baizhuo Network Smart s200 Management Platform version 20240507 and prior versions, which stems from an incorrect operation of the parameter webimg that can le...

Archer Platform 安全漏洞

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists prior to Archer Platform version 6 2024.04 that stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2024-33786

An arbitrary file upload vulnerability in Zhongcheng Kexin Ticketing Management Platform 20.04 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2024-33786

CVE-2024-33786: An arbitrary file upload vulnerability affects Zhongcheng Kexin Ticketing Management Platform (version 20.04). The exposed flaw allows attackers to execute arbitrary code by uploading a crafted file. Sources consistently reference the product and 20.04, with no explicit fixed vers...

PT-2024-25479 · Unknown · Zhongcheng Kexin Ticketing Management Platform

Name of the Vulnerable Software and Affected Versions: Zhongcheng Kexin Ticketing Management Platform version 20.04 Description: The issue allows attackers to execute arbitrary code via uploading a crafted file, exploiting an arbitrary file upload vulnerability. Recommendations: For Zhongcheng...

Command Execution Vulnerability in Business Integrated Management Platform of Puyuan Information Technology Company Limited (CNVD-2024-24191)

Puyuan Information Technology Co., Ltd. is a professional provider of software infrastructure platform products and solutions. A command execution vulnerability exists in the Business Integrated Management Platform of Puyuan Information Technology Co., Ltd. that can be exploited by an attacker to...

[SECURITY] Fedora 40 Update: kubernetes-1.29.4-1.fc40

Open Source Production-Grade Container Scheduling And Management Platform Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on...

CVE-2024-4019

A vulnerability classified as critical has been found in Byzoro Smart S80 Management Platform up to 20240411. Affected is an unknown function of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. It is possible to launch the attack remotely. The exploit has...

CVE-2024-4019 Byzoro Smart S80 Management Platform importhtml.php deserialization

A vulnerability classified as critical has been found in Byzoro Smart S80 Management Platform up to 20240411. Affected is an unknown function of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. It is possible to launch the attack remotely. The exploit has...

Logic Flaw Vulnerability in Zhengfang Service Management Platform of Zhengfang Software Co.

hereinafter referred to as "Zhengfang", founded in January 1999, is a software enterprise and a high-tech enterprise specializing in consulting, planning, construction and service in the field of education informatization in colleges and universities. A logic flaw exists in the Zhengfang Service...

The vulnerability of the OpenMetadata metadata management platform, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the OpenMetadata metadata management platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending specially crafted requests...

CVE-2023-43790 iTop vulnerable to XSS in friendlyname in object details

iTop is an IT service management platform. By manipulating HTTP queries, a user can inject malicious content in the fields used for the object friendlyname value. This vulnerability is fixed in 3.1.1 and 3.2.0...

CVE-2024-3688

CVE-2024-3688 affects Xiamen Four-Faith RMP Router Management Platform 5.2.2. The vulnerability is a SQL injection in /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState= where manipulating the groupId parameter enables remote exploitation. Multiple connected sources corroborate...

Xiamen Four-Faith RMP Router Management Platform SQL注入漏洞

Xiamen Four-Faith RMP Router Management Platform is an online chat system from Xiamen Four-Faith, China. A SQL injection vulnerability exists in Xiamen Four-Faith RMP Router Management Platform version 5.2.2, which stems from an incorrect operation of the parameter groupId that can lead to sql...

SQL Injection Vulnerability in the ERP Management Cloud Platform for Moon Clubs of Wuhan Jin Tongfang Technology Co. Ltd (CNVD-2024-22433)

Wuhan Jin Tongfang Technology Co., Ltd. is a company that provides informatization solutions for the mother and child service industry. There is a SQL injection vulnerability in the ERP management cloud platform of Wuhan Golden Tongfang Technology Co., Ltd. which can be exploited by attackers to...

CVE-2024-3521

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be...

CVE-2024-3521 Byzoro Smart S80 Management Platform userattestation.php unrestricted upload

A vulnerability was found in Byzoro Smart S80 Management Platform up to 20240317. It has been rated as critical. Affected by this issue is some unknown functionality of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be...

CVE-2024-3521

The CVE-2024-3521 case covers Byzoro Smart S80 Management Platform (versions up to 20240317). The root cause is in /useratte/userattestation.php where the web_img parameter enables unrestricted upload, enabling a remote attacker to upload arbitrary content. Documents indicate the vulnerability is...