The vulnerability of the DIAFAN.CMS content management system lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the DIAFAN.CMS website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the Webasyst content management system and the Shop-Script CMS system lies in the lack of measures to protect the SQL query structure, allowing attackers to execute arbitrary SQL code.

The vulnerability of the Webasyst framework for designing content management systems and the Shop-Script CMS system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

The vulnerability of the VoIP gateway software Telecom MG, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of the VoIP gateway software of Telecom MG is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Platypus.js tooling platform, related to deficiencies in the authentication process, allows a violator to execute arbitrary commands.

The vulnerability of the Platypus.js platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.

The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...

CVE-2024-32369

CVE-2024-32369 Описание: Уязвимость SQL-инъекции в HSC Cybersecurity HSC Mailinspector v.5.2.17-3 позволяет удаленному злоумышленнику получить конфиденциальную информацию с помощью специально сформированной полезной нагрузки в параметры start и limit компонента mliWhiteList.php. Версии: Обнаружен...

CVE-2024-23742

CVE-2024-23742 Проблема в Loom до версии 0.196.1 на macOS позволяет удаленному злоумышленнику выполнить произвольный код через настройки RunAsNode и enableNodeClilnspectArguments. С помощью этого инструмента можно проверить, уязвимо ли приложение: После проверки мы можем внедрить наш код и получи...

CVE-2022-2414-Proof-Of-Concept

CVE-2022-2414-Доказательство-концепции В pki-core обнаружена ошибка. Доступ к внешним сущностям при разборе XML-документов может привести к атакам типа XML External Entity XXE. Эта уязвимость позволяет удалённому атакующему потенциально извлекать содержимое произвольных файлов, отправляя специаль...

CVE-2025-22963

개요 Teedy v1.11 이하 버전의 사이트 간 요청 위조CSRF 취약점으로 인해 원격 공격자가 현재 인증된 사용자의 사용자 정보사용자 이름, 비밀번호 등를 변경하도록 강제할 수 있습니다. 취약점 사용자 정보 변경 엔드포인트는 /api/user/:username입니다. 이 엔드포인트는 인증을 위해 쿠키의 authtoken만 확인합니다. authtoken 값은 다른 출처 웹사이트에서 사용될 수 있습니다. root@kitploit: POST /api/user/admin HTTP/1.1 Host: localhost:8080...

CVE-2024-1304---Badgermeter-moni-tool-Reflected-Cross-Site-Scripting-XSS

CVE-2024-1304 --- Badgermeter moni tool - Отражённая межсайтовая сценарная атака XSS https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1304: 6.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L | CWE-79. Ссылка на ПО :...

CVE-2021-47930

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:08+00:00| seen| https://t.me/shimiscyberworld/1340 2026-09-13 00:00:42+00:00| seen| https://t.me/shimiscyberworld/1340...

CVE-2002-0346

CVE-2002-0346 Cobalt RAQ 4의 크로스 사이트 스크립팅 취약점으로 인해 원격 공격자가 Javascript를 포함한 URL을 통해 1 service.cgi 또는 2 alert.cgi에서 다른 Cobalt 사용자로 임의 스크립트를 실행할 수 있습니다. Packetstorm 게시물: https://packetstormsecurity.com/files/25837/Colbalt-RAQ-v4.txt.html SecurityFocus 게시물: https://www.securityfocus.com/bid/4211 작성자...

CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 позволяет удаленным атакующим вызвать отказ в обслуживании через HTTP-запрос к имени устройства MS-DOS. Внешняя ссылка: https://marc.info/?l=bugtraq&m=101174569103289&w=2 Автор Alex Hernandez также известный как @alt3kx...

CVE-2024-56116

CVE-2024-56116 제안된 설명 Amiro.CMS 7.8.4 이전 버전에서 발생하는 사이트 간 요청 위조CSRF 취약점으로, 원격 공격자가 관리자 계정을 생성할 수 있습니다. 취약점 유형 CWE-352 | 사이트 간 요청 위조CSRF 제품 공급업체 Amiro.CMS https://www.amiro.ru 영향을 받는 제품 코드 베이스 Amiro.CMS – 7.8.4 이하 권한 상승 영향 True 공급업체가 취약점을 확인 또는 인정했는가? True 발견자 Compliance Control Team 참고...

CVE-2024-42658

CVE-2024-42658 CVE-2024-42658 wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0의 문제로, 원격 공격자가 cookies 매개변수를 통해 민감한 정보를 획득할 수 있습니다. CVE-2024-42658: 요약: wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0의 취약점으로 인해 인증되지 않은 원격 공격자가 쿠키 조작을 통해 민감한 정보를 획득할 수 있습니다. 이 문제는 쿠키에 대한 보안 조치가 충분하지 않아 발생하며, 민감한 정보...

CVE-2015-5531-POC

CVE-2015-5531-POC Предыстория уязвимости Elasticsearch — это открытая распределенная поисковая система на основе RESTful, построенная на Lucene, разработанная голландской компанией Elasticsearch. Она в основном используется в облачных вычислениях и поддерживает индексацию данных через HTTP с...

Moodle LTI module Reflected - Cross-Site Scripting

A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...

Ametys CMS Information Disclosure

Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion/domain/en.xml and similar pathnames for other languages via the auto-completion plugin, which contain all characters typed by all users, including the content of...