CVE-2024-48782

File Upload vulnerability in DYCMS Open-Source Version v2.0.9.41 allows a remote attacker to execute arbitrary code via the application only detecting the extension of image files in the front-end...

A3MALL e-commerce system open source version of unauthorized access vulnerability

A3MALL e-commerce system open source version is an open source free mall system. A3MALL e-commerce system open source version of unauthorized access vulnerability , attackers can use the vulnerability to obtain sensitive information...

Uc365 site navigation open source version of da***.php file file upload vulnerability

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of da.php file file upload vulnerability . Attackers can use the vulnerability to upload...

Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™ in IBM Bluemix (CVE-2015-3197, CVE-2016-2086, CVE-2016-2216)

Summary This bulletin describes CVE-2015-3197 that was reported on January 26, 2015 by the OpenSSL Project, plus two additional vulnerabilities. Vulnerability Details CVEID: CVE-2015-3197 DESCRIPTION: OpenSSL could allow a remote attacker to conduct man-in-the-middle attacks, caused by the use of...

WSTSHOP open source version controller\Index.php file reload vulnerability

WSTSHOP open source version is a php language based on the development of B2C open source online store system . WSTSHOP open source version controller\Index.php file reload vulnerability . Allow attackers to exploit the vulnerability reload connection to a malicious external database , etc...

Reflective cross-site scripting vulnerability in Zendo Project Management Software (open source version) jump page

Zendo is an open source project management software. A reflective cross-site scripting vulnerability exists in the jump page of Zendo project management software open source version. An attacker can construct XSS statements and perform pop-up box operations to obtain user cookies and other...