Lucene search
K

217 matches found

Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.3 views

PT-2026-43649

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Path Traversal.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through = 1.8.9...

8.6CVSS5.8AI score0.00063EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/03/29 12:0 a.m.0 views

Linux Distros Unpatched Vulnerability : CVE-2018-25224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious value...

8.6CVSS6.7AI score0.00032EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/28 11:58 a.m.26 views

CVE-2018-25224 PMS 0.42 Stack-Based Buffer Overflow via Configuration File

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute she...

8.6CVSS0.00032EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/03/28 11:58 a.m.2 views

CVE-2018-25224

PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in the configuration file. Attackers can craft configuration files with oversized input that overflows the stack buffer and execute she...

8.6CVSS6.6AI score0.00032EPSS
Exploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2026/02/27 4:13 a.m.2 views

CVE-2025-50857

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload...

9.8CVSS5.9AI score0.01166EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/26 12:0 a.m.0 views

CVE-2025-50857

ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php. This allows attackers to execute arbitrary code via a crafted file upload...

9.8CVSS6.2AI score0.01166EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 9:31 a.m.1 views

CVE-2023-25707

Cross-Site Request Forgery CSRF vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin = 1.5.12 versions...

8.8CVSS7AI score0.0011EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/29 9:3 p.m.3 views

CVE-2025-15152

A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted...

6.5CVSS6.2AI score0.0003EPSS
Exploits0References1
NVD
NVD
added 2025/12/28 8:15 p.m.3 views

CVE-2025-15152

A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted...

6.5CVSS0.0003EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/12/28 8:2 p.m.1 views

CVE-2025-15152 h-moses moga-mall PmsProductController.java addProduct unrestricted upload

A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted...

6.5CVSS6.2AI score0.0003EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/28 12:0 a.m.1 views

PT-2025-53667

Name of the Vulnerable Software and Affected Versions h-moses moga-mall versions prior to 392d631a5ef15962a9bddeeb9f1269b9085473fa Description A vulnerability exists in h-moses moga-mall. The issue affects the addProduct function within the file...

6.5CVSS6.5AI score0.0003EPSS
Exploits0References9
CNNVD
CNNVD
added 2025/12/28 12:0 a.m.0 views

moga-mall 代码问题漏洞

moga-mall is a microservices architecture based e-commerce platform by h-moses individual developers. A code issue vulnerability exists in moga-mall 392d631a5ef15962a9bddeeb9f1269b9085473fa and earlier versions, which originates from the file...

6.5CVSS6.5AI score0.0003EPSS
Exploits0References5
NVD
NVD
added 2025/11/06 4:16 p.m.1 views

CVE-2025-5803

Missing Authorization vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through = 1.8.2...

5.3CVSS0.00046EPSS
Exploits0References1
NVD
NVD
added 2025/11/05 4:15 a.m.3 views

CVE-2025-11835

The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability and validation check on the PMSAJAXCheckoutHandler::processpayment function in all versions up t...

5.3CVSS0.0007EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/10/21 10:44 a.m.3 views

WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by an unknown individual in WordPress Plugin VikBooking Hotel Booking Engine & PMS versions = 1.8.2...

8.8CVSS7AI score0.00046EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-27239

Malware in sbrugna...

7.5CVSS7.5AI score0.00112EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-43133

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00072EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-43134

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00134EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-45816

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00134EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-43111

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.0009EPSS
Exploits0References2
Rows per page
Query Builder