VulnCheck KEV: CVE-2024-10915

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgiuseradd of the file /cgi-bin/accountmgr.cgi?cmd=cgiuseradd. The manipulation of the argument group leads to os command injection. T...

MAL-2025-66937 Malicious code in beautiful-gold-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33c1490c179356d8f1ee83ab71102dea0e36e7478eb9bf5a6b7a8370e1431ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-61998

CVE-2025-61998 affects OPEXUS FOIAXpress versions before 11.13.3.0. A privileged (administrative) user can inject JavaScript/content into the Technical Support Hyperlink Manager; the injected payload executes in the context of other users when they click the link, enabling actions on behalf of th...

CVE-2025-46940

Adobe Experience Manager versions 6.5.22 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...

PT-2025-19889 · Dell · Dell Storage Center +1

Name of the Vulnerable Software and Affected Versions: Dell Storage Center - Dell Storage Manager version 21.0.20 Description: The issue is related to an Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This could allow an unauthenticated attacker...

CVE-2022-26484

An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. The web server fails to sanitize admin/cgi-bin/rulemgr.pl/getfile/ input data, allowing a remote authenticated administrator to read arbitrary files on the system via...

CVE-2019-16057

The loginmgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection...

CVE-2018-20419

DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...

dhcp: Command injection vulnerability in the DHCP client NetworkManager integration script

A command injection flaw was found in the NetworkManager integration script included in the DHCP client packages in Red Hat Enterprise Linux. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root...

CVE-2015-0128

Technical details about CVE-2015-0128 are not publicly available in the provided connected documents. The materials reiterate the XSS description and affected IBM Rational Quality Manager versions; monitor for updates.

DMXReady Blog Manager <= 1.1 - Remote File Delete Vulnerability

No description provided by source. Title : DMXReady Blog Manager = 1.1 Remote Files Delete Vulnerability Author : ajann from Turkey Contact : : S.Page : http://www.dmxready.com $$ : 199.97 $ Dork : inurl:incwebblogmanager.asp DorkEx :...

CVE-2010-0693

The CVE-2010-0693 entry describes a SQL injection vulnerability in CommodityRentals Trade Manager Script, specifically in the products.php module, exploitable via the cid parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands. Available references corroborate th...

CVE-2010-0693: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Trade Manager Script SQL Injection

Exploit Title: Trade Manager Script SQL injection Vulnerability Date: 11/02/2010 Author: JaMbA Software Link: N/A Version: all version Tested on: Windows & Linux CVE : ::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability Author : JaMbA Script Site :...

Trade Manager Script SQL injection Vulnerability

Exploit for unknown platform in category web applications ================================================ Trade Manager Script SQL injection Vulnerability ================================================ ::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability...

Trade Manager Script - SQL Injection

::::::::::::::::::::::::: Exploit Title : Trade Manager Script SQL injection Vulnerability Author : JaMbA Script Site : www.commodityrentals.com Version : All Versions Tested on : Windows & Linux ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::...

AJ HYIP ACME (comment.php artid) SQL Injection Vulnerability

No description provided by source. proud to be muslim rEm0te sql injction VulnErability ajhyip manager script AuTh0r : security fears team Home : WwW.alsonaa.com members: HeB4RieH , germay...

AJ HYIP ACME - comment.php SQL Injection

AJ HYIP ACME - comment.php SQL Injection proud to be muslim rEm0te sql injction VulnErability ajhyip manager script AuTh0r : security fears team Home : WwW.alsonaa.com members: HeB4RieH , germayax...