EUVD-2024-0961

Malicious code in bioql PyPI...

CVE-2023-37263

Strapi is the an open-source headless content management system. Prior to version 4.12.1, field level permissions are not respected in the relationship title. If an actor has relationship title and the relationship shows a field they don't have permission to see, the field will still be visible...

snipe-it cross-site scripting vulnerability (CNVD-2022-36053)

Snipe-IT is an open source IT asset/license management system. snipe-IT has a security vulnerability that can be exploited by attackers to steal user cookies...

SemCms suffers from SQL injection vulnerability (CNVD-2021-29089)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

ZZCMS has a flawed logic vulnerability

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS there exists a logic flaw vulnerability. Attackers can use the vulnerability to reinstall the system...

Logic flaw vulnerability in ZZCMS (CNVD-2021-14557)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS logic flaws exist in the vulnerability , attackers can use the vulnerability to modify the existing user...

JTopCMS has a file upload vulnerability

JTopCMS based on the JavaEE standard , is used to manage site content open source web management system cms, java cms, jsp cms. JTopCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in RGCMS

RGCMS RuiGu content management system is a set of open source building management system , using PHP language , written in the framework of Thinkphp5.1. , the database using MYSQL database . RGCMS there is a command execution vulnerability , an attacker can use the vulnerability to obtain server...