150 matches found
MAL-2025-4926 Malicious code in mh-swagger-api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c511d3eda3b228d180191f4caee04bad5746d8134a082644b776b462f4b2eb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2024-44017
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MinHyeong Lim MH Board mh-board allows PHP Local File Inclusion.This issue affects MH Board: from n/a through = 1.3.2.1...
CVE-2024-44017
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MinHyeong Lim MH Board mh-board allows PHP Local File Inclusion.This issue affects MH Board: from n/a through = 1.3.2.1...
CVE-2024-44017 WordPress MH Board plugin <= 1.3.2.1 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MinHyeong Lim MH Board mh-board allows PHP Local File Inclusion.This issue affects MH Board: from n/a through = 1.3.2.1...
CVE-2024-44017 WordPress MH Board plugin <= 1.3.2.1 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MinHyeong Lim MH Board mh-board allows PHP Local File Inclusion.This issue affects MH Board: from n/a through = 1.3.2.1...
CVE-2024-44017
CVE-2024-44017 : MH Board WordPress plugin (MinHyeong Lim) versions 1.3.2.1 and earlier are affected by an unauthenticated Local File Inclusion due to improper pathname restriction (Path Traversal). Exploitation could allow an attacker to access restricted files on the server through the plugin’s...
WordPress plugin MH Board 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
CVE-2024-44017: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in MinHyeong Lim MH Board mh-board allows PHP Local File Inclusion.This issue affects MH Board: from n/a through = 1.3.2.1...
WordPress MH Board plugin <= 1.3.2.1 - Local File Inclusion vulnerability
Local File Inclusion vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin MH Board versions = 1.3.2.1...
WordPress MH Board Plugin <= 1.3.2.1 is vulnerable to Local File Inclusion
Software MH Board Type Plugin Vulnerable versions = 1.3.2.1 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-44017 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 729ae474bd3b Credits tahu.datar Required privilege Unauthenticated...
MAL-2024-2661 Malicious code in mh-web-hardware (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in mh-web-hardware (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-3765 Xiongmai AHB7804R-MH-V2 Sofia Service access control
A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530R80X30-PQ8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input...
CVE-2024-3765 Xiongmai AHB7804R-MH-V2 Sofia Service access control
A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530R80X30-PQ8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input...
Xiongmai AHB7804R-MH-V2 访问控制错误漏洞
The Xiongmai AHB7804R-MH-V2 is a hard disk recorder from Xiongmai Technology Xiongmai, a Chinese company. An access control error vulnerability exists in some Xiongmai products, which stems from improper access control. The following products are affected: AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL...
CVE-2024-3765: Improper Access Control
A vulnerability classified as critical was found in Xiongmai AHB7804R-MH-V2, AHB8004T-GL, AHB8008T-GL, AHB7004T-GS-V3, AHB7004T-MHV2, AHB8032F-LME and XM530R80X30-PQ8M. Affected by this vulnerability is an unknown functionality of the component Sofia Service. The manipulation with the input...
mh-sd.de Improper Access Control vulnerability OBB-3776847
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
mh-2.de Improper Access Control vulnerability OBB-3766232
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-10351 · Typo3 · Mback2K Mh Httpbl Extension
Name of the Vulnerable Software and Affected Versions: mback2k mh httpbl Extension versions 1.1.7 and earlier Description: A problematic vulnerability has been found in the mback2k mh httpbl Extension on TYPO3, affecting the function stopOutput of the file class.tx mhhttpbl.php. The manipulation ...