CVE-2022-36603

InnoSilicon T3T+ t2t+_soc_20190911_151433.swu contains a remote code execution (RCE) vulnerability in the checkUrl function. The issue is documented as CVE-2022-36603 with a high impact (CVSS v3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base score 8.8). The affected component is the t2t+ soc firmwa...

CVE-2022-36602

The CVE-2022-36602 entry concerns InnoSilicon A10, specifically the a10_20200924_120556 build, which contains a remote code execution (RCE) vulnerability in the setPlatformAPI function. The issue enables an attacker to achieve code execution remotely, as indicated by the vulnerability description...

CVE-2022-36602

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

RCE flaw resides in the Atlassian Bitbucket Server and Data Center

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Atlassian has patched a significant security hole in Bitbucket Server and Data Center, which could allow attackers to execute arbitrary code on susceptible systems. The vulnerability is identified...

CVE-2022-36602: Undefined Security Weakness

InnoSilicon A10 a1020200924120556 was discovered to contain a remote code execution RCE vulnerability in the setPlatformAPI function...

Python < 3.6.14, 3.7.x < 3.7.11, 3.8.x < 3.8.9, 3.9.x < 3.9.3 (bpo-43285) - Mac OS X

Python is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

Python < 3.6.14, 3.7.x < 3.7.11, 3.8.x < 3.8.9, 3.9.x < 3.9.3 (bpo-43285) - Windows

Python is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

CVE-2022-37184

The application managewebsite.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file...

Design/Logic Flaw

The application managewebsite.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file...

CVE-2022-37184

The CVE describes a vulnerability in Garage Management System 1.0 where the file upload handler manage_website.php allows an authenticated attacker to upload a shell file resulting in Remote Code Execution (RCE) or Local Code Execution (LCE). Multiple connected sources (Red Hat advisory, PT Secur...

CVE-2022-37184

The application managewebsite.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file...

CVE-2022-36580: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the component /admin/products/controller.php?action=add of Online Ordering System v2.3.2 allows attackers to execute arbitrary code via a crafted PHP file...

AlmaLinux 8 : php:7.4 (ALSA-2022:6158)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:6158 advisory. php: uninitialized array in pgqueryparams leading to RCE CVE-2022-31625 Tenable has extracted the preceding description block directly from the AlmaLinux security...

CVE-2022-37184: Unrestricted Upload of File with Dangerous Type

The application managewebsite.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a dangerous RCE or LCE exploit file...

Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics

CVE-2022-24637 Exploit for the Unauthenticated RCE in Open...

Exploit for Improper Privilege Management in Openwebanalytics Open_Web_Analytics

AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026...

CVE-2022-36572

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution RCE vulnerability via the component /upload/admin.php?/deal/...

Remote code execution

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution RCE vulnerability via the component /upload/admin.php?/deal/...

CVE-2022-36572

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 was discovered to contain a remote code execution RCE vulnerability via the component /upload/admin.php?/deal/...

CVE-2022-36572

Sinsiu Sinsiu Enterprise Website System v1.1.1.0 is affected by CVE-2022-36572, a remote code execution (RCE) vulnerability exploitable via the component /upload/admin.php?/deal/. The PT-2022-23479 advisory confirms an RCE impact and notes there is no available patch/version with a fix, recommend...