The vulnerability of the ReadyScript e-commerce management system, related to the unlimited loading of dangerous type files, allows a hacker to upload any type of files.

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

The vulnerability of the ReadyScript e-commerce management system, related to the unlimited loading of dangerous type files, allows a hacker to upload any type of files.

The vulnerability of the ReadyScript e-commerce management system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to load any desired files...

The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Platypus.js tooling platform, related to deficiencies in the authentication process, allows a violator to execute arbitrary commands.

The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

CVE-2025-29306

POC - CVE-2025-29306 Уязвимость выполнения кода FOXCMS /images/index.html Обзор Проблема в FoxCMS v.1.2.5 позволяет удалённому злоумышленнику выполнять произвольный код через страницу отображения случаев в компоненте index.html. Полный POC Читайте об этом — CVE-2025-29306 Отказ от ответственности...

CVE-2023-48795

Сканер уязвимости OpenSSH для CVE-2023-48795 Этот инструмент на Python сканирует системы на предмет установок OpenSSH и проверяет, уязвимы ли они для CVE-2023-48795 — критической уязвимости, затрагивающей версии ранее OpenSSH 9.6. Скрипт предоставляет подробный отчёт о просканированных системах,...

CVE-2024-56116

CVE-2024-56116 Предлагаемое описание Уязвимость межсайтовой подделки запроса CSRF в Amiro.CMS до версии 7.8.4 позволяет удалённым злоумышленникам создать учётную запись администратора. Тип уязвимости CWE-352 | Межсайтовая подделка запроса CSRF Производитель продукта Amiro.CMS https://www.amiro.ru...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 позволяет удаленным атакующим вызвать отказ в обслуживании через HTTP-запрос к имени устройства MS-DOS. Внешняя ссылка: https://marc.info/?l=bugtraq&m=101174569103289&w=2 Автор Alex Hernandez также известный как @alt3kx...

CVE-2015-5531-POC

CVE-2015-5531-POC Предыстория уязвимости Elasticsearch — это открытая распределенная поисковая система на основе RESTful, построенная на Lucene, разработанная голландской компанией Elasticsearch. Она в основном используется в облачных вычислениях и поддерживает индексацию данных через HTTP с...

CVE-2025-22963

Обзор Уязвимость межсайтовой подделки запроса CSRF в Teedy версиях = v1.11 позволяет удалённым злоумышленникам принудить конечного пользователя изменить свои пользовательские данные имя пользователя, пароль и т. д. в веб-приложении, в котором он в настоящее время аутентифицирован. Уязвимость...

CData Sync < 23.4.8843 - Path Traversal

A path traversal vulnerability exists in the Java version of CData Sync CData - Sync' - r...

Canon Devices - Authentication Bypass in Catwalk Server

Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...

Hongdian H8922 3.0.5 Devices - Local File Inclusion

Hongdian H8922 3.0.5 devices are vulnerable to local file inclusion. The /logdownload.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ e.g., ../../etc/passwd This can be carried out wi...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

Ametys CMS Information Disclosure

Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml and similar pathnames for other languages via the auto-completion plugin, which contain all characters typed by all users, including the content of...