EUVD-2018-5930

Malware in sbrugna...

CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

PT-2024-30188 · Unknown · Anything-Llm

Name of the Vulnerable Software and Affected Versions: anything-llm affected versions not specified Description: A vulnerability exists in the workspace update process due to improper input validation. The application fails to validate or format JSON data sent in an HTTP POST request to...

GHSA-M755-GXXG-R5QH Zope management interface vulnerable to stored cross site scripting via the title property

Impact The title property, available on most Zope objects, can be used to store script code that is executed while viewing the affected object in the Zope Management Interface ZMI because the title property is displayed unquoted in the breadcrumbs element. All versions of Zope 4 and Zope 5 are...

CVE-2021-3165

SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the //CampaignManager/users URI...

ClipperCMS Cross-Site Scripting Vulnerability (CNVD-2018-13274)

ClipperCMS is a content management system CMS. A cross-site scripting vulnerability exists in ClipperCMS version 1.3.3. The vulnerability can be exploited by remote attackers to inject/store malicious scripts and execute them via the Full Name field of the Security - Manager Users or Security - W...

CVE-2018-13998

ClipperCMS 1.3.3 has stored XSS via the Full Name field of 1 Security - Manager Users or 2 Security - Web Users...

CVE-2018-13998

ClipperCMS 1.3.3 contains a stored XSS flaw in the Full Name field leveraged from the Security → Manager Users or Security → Web Users interfaces. The root cause is unvalidated/sanitized input stored and later rendered in a context where scripts execute. Impact is user-protection risk through scr...

Updated asterisk packages fix security vulnerabilities

Updated asterisk packages fix security vulnerabilities: Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action CVE-2014-4046. Asterisk Open...