CVE-2024-24393

File Upload vulnerability index.php in Pichome v.1.1.01 allows a remote attacker to execute arbitrary code via crafted POST request...

CVE-2024-24215

An issue in the component /cgi-bin/GetJsonValue.cgi of Cellinx NVT Web Server 5.0.0.014 allows attackers to leak configuration information via a crafted POST request...

Pichome Code Issue Vulnerability

Qiaoqiao Times PicHome is a program to quickly create online galleries, audio/video libraries, and text libraries by China Qiaoqiao Times Company. A code issue vulnerability exists in Pichome version v.1.1.01, which originates from index.php that allows remote attackers to execute arbitrary code...

Cellinx NVT Web Server Security Vulnerability

Cellinx NVT Web Server is a web platform for virtual terminal management NVT from Cellinx, Korea. The platform is mainly used for managing video surveillance devices, and is divided into a monitoring page and a setting page to control the terminal. A security vulnerability exists in Cellinx NVT W...

CVE-2024-24393

CVE-2024-24393 : Pichome v1.1.01 contains an index.php file upload vulnerability that allows a remote attacker to execute arbitrary code via a crafted POST request. Severity is high (CVSS v3.1: 9.8, Network, No user interaction). Connected sources corroborate a remote code execution impact from a...

Arbitrary File Upload

mingSoft is vulnerable to Arbitrary File Upload. The vulnerability is due to improper validation when uploading files within the following POST request /ms/file/upload.do. This issue can be exploited by an attacker to upload arbitrary files...

TP-Link ER7206 Omada Gigabit VPN Router uhttpd web group command injection vulnerability

Talos Vulnerability Report TALOS-2023-1858 TP-Link ER7206 Omada Gigabit VPN Router uhttpd web group command injection vulnerability February 6, 2024 CVE Number CVE-2023-47617 SUMMARY A post authentication command injection vulnerability exists when configuring the web group member of Tp-Link ER72...

GHSA-7QW4-9R68-2RMX mingSoft MCMS File Upload vulnerability

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

mingSoft MCMS File Upload vulnerability

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

Unrestricted file upload

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

CVE-2024-22567

File Upload vulnerability in MCMS 5.3.5 allows attackers to upload arbitrary files via crafted POST request to /ms/file/upload.do...

mooSocial 3.1.8 - Cross-Site Scripting (XSS) on User Login Page Vulnerability

Exploit Title: mooSocial 3.1.8 - Cross-Site Scripting XSS on User Login Page Exploit Author: Astik Rawat ahrixia Vendor Homepage: https://moosocial.com Software Link: https://travel.moosocial.com/ Version: 3.1.8 Tested on: Windows 11 CVE : CVE-2023-43325 Description: A Cross Site Scripting XSS...

CVE-2023-44031

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request...

CVE-2023-44031

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request...

Improper access control

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request...

PT-2024-13166 · Reprise · Reprise License Manager

Name of the Vulnerable Software and Affected Versions: Reprise License Manager version 15.1 Description: The issue is related to incorrect access control in the software, allowing attackers to save sensitive files in insecure locations using a crafted POST request. Recommendations: For Reprise...

CVE-2023-44031

Reprise License Manager (RLM) v15.1 is affected by CVE-2023-44031 due to an incorrect access control flaw that allows an attacker to arbitrarily save sensitive files in insecure locations via a crafted POST request. The vulnerability stems from improper authorization checks in the RLM web/HTTP ha...

CVE-2023-44031

Incorrect access control in Reprise License Management Software Reprise License Manager v15.1 allows attackers to arbitrarily save sensitive files in insecure locations via a crafted POST request...