Design/Logic Flaw

An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function...

CVE-2023-46468

An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function...

CVE-2023-46468: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function...

PT-2023-30037 · Unknown · Juzawebcms

Name of the Vulnerable Software and Affected Versions: juzawebCMS versions 3.4 and earlier Description: An issue in the software allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function. This enables the attacker to potentially gain control over the...

TP-LINK Router Code Execution

The vulnerability of the uninstallPluginReqHandle function in TP-LINK’s TL-WR886N router software lies in the reading of data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

de.hilling.graylog:graylog-plugin-function-multimatch (>=1.0.2, <=1.1.0), org.graylog.plugins:graylog-plugin-parent (2.4.0) +3 more potentially affected by CVE-2023-41045 via org.graylog2:graylog2-server (2.4.0)

org.graylog2:graylog2-server MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.graylog2:graylog2-server and may be impacted: - de.hilling.graylog:graylog-plugin-function-multimatch =1.0.2, =1.1.0 -...

CVE-2019-25151 Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation

The Funnel Builder plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the activateplugin function in versions up to, and including, 1.3.0. This makes it possible for authenticated attackers to activate any plugin on the vulnerable service...

CVE-2020-19028

File Upload vulnerability found in Emlog EmlogCMS v.6.0.0 allows a remote attacker to gain access to sensitive information via the /admin/plugin.php function...

Privilege escalation

PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability...

CVE-2022-47766

PopojiCMS v2.0.1 backend plugin function has a file upload vulnerability...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-11650 Source advisory: OSV:GHSA-H7G4-65MF-6MXH...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-11650 Source advisory: GHSA-H7G4-65MF-6MXH...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +6 more potentially affected by CVE-2018-14380 via org.graylog2:graylog2-server (>=2.0.0-alpha.1, <=2.4.5)

org.graylog2:graylog2-server MAVEN version =2.0.0-alpha.1, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.1.2, =2.2.0-alpha.1 Source cves: CVE-2018-14380 Source advisory: OSV:GHSA-38HF-XJMX-JRH8...

Pegasus CMS 1.0 Remote Code Execution

Exploit Title: Pegasus extrafields.php Plugin Remote Code Execution Date: 14 March 2019 Exploit Author: R3zk0n Vendor Homepage: https://www.wisdom.com.au/web/pegasus-cms Software Link: N/A Version: 1.0 Tested on: Linux CVE : N/A The Pegasus CMS is vulnerable to directory travaseral and Remote cod...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2018-14380 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=2.4.5)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2018-14380 Source advisory: MEND:CVE-2018-14380...

com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (1.0.0), com.airbus-cyber-security.graylog:graylog-plugin-logging-alert (>=1.0.0, <=1.0.1) +8 more potentially affected by CVE-2018-11650 via org.graylog2:graylog2-server (>=1.0.0-beta.3, <=2.4.3)

org.graylog2:graylog2-server MAVEN version =1.0.0-beta.3, =1.0.0, =1.0.2, =2.2.0-alpha.1, =1.1.0, =2.2.0-beta.1, =2.2.0-alpha.1, =1.0.3, =1.0.0-beta.2, =1.2.0-rc.1, =1.3.4 Source cves: CVE-2018-11650 Source advisory: MEND:CVE-2018-11650...