Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

CVE-2026-67687-ICS-Park-Smart-Park-Management-System-v2.0

This repository does not have a README...

Kitae Park Mang Board Cross-site Scripting Vulnerability

Kitae Park Mang Board 2.4.3 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the 'content' parameter, allowing for storage-type cross-site scripting attacks. Unauthenticated attackers can inject...

Kitae Park Mang Board Cross-site Scripting Vulnerability

Kitae Park’s Mang Board 2.4.4 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input cleaning and output escaping for the content parameters. It is possible to bypass the cleaning by omitting the datatype parameter in the modify request,...

CVE-2026-109698

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4...

Kitae Park Mang Board Cross-site Scripting Vulnerability

Kitae Park Mang Board 2.4.0 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient cleaning of the 'datatype' parameter input and inadequate escaping of output, allowing for storage-type cross-site scripting attacks. Unauthenticated attackers ca...

Malicious code in enough-park-near (npm)

The package enough-park-near was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo (npm)

The package down-lo-ad-now-zip-mp3-7728-at-action-park-hda4o-dpbnxo was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-park (npm)

The package @zalastax/nolb-park was found to contain malicious code. --- Credit: OpenSSF source...

EUVD-2026-54309

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

EUVD-2026-54307

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

CVE-2026-67687

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-67687

The ICS-Park Smart Park Management System v2.0 contains an Insecure Permissions vulnerability allowing an authenticated low-privileged user to perform vertical privilege escalation. The root cause is a lack of authorization checks in the RoleController.save() method (missing @HasPermissions annot...

CVE-2026-67687

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-67688: Unrestricted Upload of File with Dangerous Type

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-67687: Improper Access Control

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

PT-2026-68778

Name of the Vulnerable Software and Affected Versions ICS-Park Smart Park Management System version 2.0 Description The file upload module contains an unrestricted file upload flaw. This allows a remote attacker to upload malicious files and execute arbitrary code on the system. Recommendations A...