7944 matches found
CVE-2024-22632
Setor Informatica Sistema Inteligente para Laboratorios S.I.L. 388 was discovered to contain a remote code execution RCE vulnerability via the hmsg parameter. This vulnerability is triggered via a crafted POST request...
Quarkus: security checks in resteasy reactive may trigger a denial of service
A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any...
The vulnerability of the fromAdvSetMacMtuWan function (/goform/AdvSetMacMtuWan) in the Tenda AC8 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromAdvSetMacMtuWan function /goform/AdvSetMacMtuWan of the Tenda AC8 router software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information b...
The vulnerability of the fromDhcpListClient function in the Tenda W30E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fromDhcpListClient function in the Tenda W30E router software relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected informatio...
moziloCMS 安全漏洞
moziloCMS is an open source content management system CMS. It is primarily aimed at users with little knowledge of HTML and is impressive for its beginner-friendly operation. A security vulnerability exists in version v2.0 of moziloCMS, which stems from a vulnerability that allows an attacker to...
CVE-2024-29368
CVE-2024-29368 affects moziloCMS v2.0, targeting the file handling module. The vulnerability enables an attacker to bypass extension restrictions by renaming uploaded files, potentially allowing arbitrary code execution or storage of malicious content. Public documentation from multiple sources c...
PT-2024-22868 · Mozilocms · Mozilocms
Name of the Vulnerable Software and Affected Versions: moziloCMS version 2.0 Description: The issue allows attackers to bypass file upload restrictions, potentially leading to unauthorized file execution or storage of malicious content. This is achieved by renaming files, which can result in the...
The vulnerability of the formexeCommand function (/goform/execCommand) in the Tenda AC500 router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the formexeCommand function /goform/execCommand in the Tenda AC500 router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...
The vulnerability of the R7WebsSecurityHandler function (/goform/execCommand) in the Tenda AC500 router software allows a hacker to execute arbitrary code.
The vulnerability of function R7WebsSecurityHandler /goform/execCommand in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...
The vulnerability of the fromDhcpListClient function (/goform/DhcpListClient) in the Tenda AC500 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromDhcpListClient function /goform/DhcpListClient in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted POST request...
SUSE-SU-2024:1345-1 Security update for tomcat
This update for tomcat fixes the following issues: - CVE-2024-24549: Fixed denial of service during header validation for HTTP/2 stream bsc1221386 - CVE-2024-23672: Fixed denial of service due to malicious WebSocket client keeping connection open bsc1221385 Other fixes: - Update to Tomcat 9.0.87...
The vulnerability of the web interface of Tp-Link AC1350 wireless access points allows a hacker to trigger a service failure.
The vulnerability of the web interface of Tp-Link AC1350 wireless access points is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially crafted HTTP POST request...
CVE-2024-2912
CVE-2024-2912 (BentoML) has documented insecure deserialization leading to remote code execution (RCE). The vulnerability arises when a serialized object is crafted to execute OS commands during deserialization and sent to BentoML endpoints via POST requests, allowing attackers to run arbitrary c...
CVE-2024-1601
CVE-2024-1601 affects parisneo/lollms-webui; an SQL injection exists in delete_discussion() exploitable via a crafted POST to /delete_discussion with a malicious id parameter, allowing deletion of all records in the discussion and message tables. Impact is data loss; reports indicate this can be ...
CVE-2024-1601 SQL Injection in parisneo/lollms-webui
An SQL injection vulnerability exists in the deletediscussion function of the parisneo/lollms-webui application, allowing an attacker to delete all discussions and message data. The vulnerability is exploitable via a crafted HTTP POST request to the /deletediscussion endpoint, which internally...
PT-2024-22740
Name of the Vulnerable Software and Affected Versions BentoML affected versions not specified Description An insecure deserialization vulnerability exists in the BentoML framework, allowing remote code execution RCE by sending a specially crafted POST request. By exploiting this vulnerability,...
BentoML 安全漏洞
BentoML is an open source modeling service library from BentoML Open Source. for building high-performance and scalable AI applications using Python. A security vulnerability exists in BentoML that stems from the presence of an insecure deserialization vulnerability that allows Remote Code...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Minio
MinIO vulnerability exploit CVE-2023-28432 Description T...
WBCE CMS Version 1.6.1 - Remote Command Execution (Authenticated)
Exploit Title: WBCE CMS Version : 1.6.1 Remote Command Execution Date: 30/11/2023 Exploit Author: tmrswrr Vendor Homepage: https://wbce-cms.org/ Software Link: https://github.com/WBCE/WBCECMS/archive/refs/tags/1.6.1.zip Version: 1.6.1 Tested on: https://www.softaculous.com/apps/cms/WBCECMS POC: 1...