CVE-2023-5493

A vulnerability has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulation of the argument fileupload leads t...

Command injection

A vulnerability was found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this issue is some unknown functionality of the file /log/download.php. The manipulation of the argument file leads to os...

Out-of-bounds

A vulnerability has been found in Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /useratte/web.php. The manipulation of the argument fileuploa...

CVE-2023-5494

Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (versions up to 20230928) contains an OS command injection vulnerability in the /log/download.php endpoint. The issue arises from manipulating the file argument, allowing remote exploitation. Public disclosures exist (...

CVE-2023-5492 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform licence.php unrestricted upload

A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. Affected is an unknown function of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted...

CVE-2023-5491 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform updatelib.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928. This issue affects some unknown processing of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to...

CVE-2023-5491

CVE-2023-5491 affects Byzoro Smart S45F and Beijing Baichuo Smart S45F Multi-Service Secure Gateway platforms up to 20230928. A vulnerability in /sysmanage/updatelib.php, specifically the file_upload argument, allows unrestricted upload. The issue can be triggered remotely and an exploit has been...

PT-2023-32128 · Beijing Baichuo · Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230928 Description: A critical vulnerability has been found in the Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform...

Tencent TDSQL Chitu management platform Cross-Site Scripting Vulnerability

Tencent TDSQL Chitu management platform is a tdsql chitu management platform from China's Tencent Tencent. A cross-site scripting vulnerability exists in Tencent TDSQL Chitu management platform version v.10.3.19.5.0, which originated from a vulnerability that allows remote attackers to obtain...

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

[SECURITY] Fedora 39 Update: kubernetes-1.27.5-1.fc39

Open Source Production-Grade Container Scheduling And Management Platform...

CVE-2023-4873

The CVE-2023-4873 entry concerns Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230906). Affects an unknown function in /importexport.php where manipulating the sql argument triggers an OS command injection. Exploitation can be carried out remotely, and pu...

CVE-2023-4745

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230822. It has been rated as critical. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation leads to sql injection. The attack may be...

CVE-2023-4745

CVE-2023-4745 concerns Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform (up to 20230822). Multiple sources confirm a vulnerability in the unknown functionality of /importexport.php that leads to SQL injection. The issue can be triggered remotely over the network and ...

CVE-2023-4739

Beijing Baichuo Smart S85F Management Platform up to 20230820 is affected by a vulnerability in /sysmanage/updateos.php where manipulation of the 1_file_upload argument leads to unrestricted remote file upload. The issue is described as critical with remote exploit potential and the exploit is pu...

CVE-2023-4739 Byzoro Smart S85F Management Platform updateos.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 20230820. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php. The manipulation of the argument 1fileupload leads to unrestricted upload. The attac...

PT-2023-30438 · Beijing Baichuo · Beijing Baichuo Smart S85F Management Platform

Name of the Vulnerable Software and Affected Versions: Beijing Baichuo Smart S85F Management Platform up to 20230820 Description: A critical issue has been found in the Smart S85F Management Platform, affecting some unknown functionality of the file /sysmanage/updateos.php. The manipulation of th...

CVE-2023-4546

CVE-2023-4546 affects Byzoro/Beijing Baichuo Smart S85F Management Platform up to version 20230816. The vulnerability concerns an unknown functionality in the file /sysmanage/licence.php, where manipulation leads to improper access controls. Exploitation has been disclosed publicly and may be use...

CVE-2023-4546 Byzoro Smart S85F Management Platform licence.php access control

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230816. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation leads to improper access controls. The exploit has been disclosed...

CVE-2023-4544

A vulnerability was found in Byzoro Smart S85F Management Platform up to 20230809. It has been rated as problematic. This issue affects some unknown processing of the file /config/php.ini. The manipulation leads to direct request. The attack may be initiated remotely. The exploit has been disclos...