PT-2026-21367

A vulnerability has been found in feng ha ha/megagao ssm-erp and production ssm up to 4288d53bd35757b27f2d070057aefb2c07bdd097. This affects the function pictureDelete of the file PictureController.java. Such manipulation of the argument picName leads to path traversal. The attack can be launched...

PT-2022-12489

Name of the Vulnerable Software and Affected Versions Tenda routers G1 and G3 version 15.11.0.179502 CN Description A command injection issue was found in the function uploadPicture, allowing attackers to execute arbitrary commands via the pic name parameter. Recommendations For Tenda routers G1...