Desdev DedeCMS 安全漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. A security vulnerability exists in DedeCMS...

Havelsan Dialogue 安全漏洞

Havelsan Dialogue is an application from Havelsan. It allows you to participate in meetings from any device, anytime, anywhere. Havelsan Dialogue suffers from a security vulnerability that stems from a misconfiguration of permissions, which allows an attacker to access features that are not bound...

OneThink 安全漏洞

OneThink is an open source content management framework. A security vulnerability exists in OneThink version v.1.1, which stems from an arbitrary code execution vulnerability in the AddonsController.class.php component...

TaoCMS 安全漏洞

TaoCMS is a Chinese micro CMS Content Management System. A security vulnerability exists in TaoCMS version v.3.0.2. A remote attacker can exploit this vulnerability to execute arbitrary code and obtain sensitive information via the include/model/file.php component...

PrestaShop 安全漏洞

PrestaShop is an open source e-commerce solution from the American company PrestaShop. The solution provides multiple payment methods, short message alerts and product image zoom, among other features. A security vulnerability exists in PrestaShop eventsmanager version 4.3.0 and earlier, which...

Danswer 安全漏洞

Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. Danswer has a security vulnerability that stems from Vulnerability to GET/SET unauthorized access to Slack Bot tokens...

Ring agrees to pay $5.6 million after cameras were used to spy on customers

Amazons Ring has settled with the Federal Trade Commission FTC over charges that the company allowed employees and contractors to access customers private videos, and failed to implement security protections which enabled hackers to take control of customers’ accounts, cameras, and videos. The FT...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy v.7.7 and prior versions, which originated from allowing remote attackers to obtain sensitive information via the update function in t...

Uvdesk 安全漏洞

Uvdesk is a complete ticket support system open-sourced by Uvdesk India. A security vulnerability exists in UvDesk versions 1.0.0 through 1.1.3 that stems from an unauthenticated file upload allowing remote code execution...

synapse 安全漏洞

synapse is an application. for open federated instant messaging and VoIP. A security vulnerability exists in Synapse versions prior to 1.105.1 that stems from a security issue in the authentication chain index that allows an attacker to perform a denial of service via disk padding and high CPU...

boldelectric.ca Cross Site Scripting vulnerability OBB-3920746

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tcl 安全漏洞

Tcl is a freely available open source package. It provides a powerful platform for creating integrated applications that tie together various applications, protocols, devices and frameworks. A security vulnerability exists in TCL 30Z , TCL 10 that stems from the fact that certain software version...

ppsedu.com Cross Site Scripting vulnerability OBB-3919222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner from an individual developer in Hayden, USA. A security vulnerability exists in Mealie versions prior to 1.4.0, which stems from a lack of rate limiting on the endpoint also allows an attacker to generate persistent requests to any target of...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner from an individual developer in Hayden, USA. A security vulnerability exists in Mealie versions prior to 1.4.0, which stems from a safescrapehtml function that utilizes a user-controlled URL to make a request to a remote server, which can be...

WeBid 安全漏洞

WeBid is an open source auction website building solution. A security vulnerability exists in WeBid v1.2.1, which stems from the presence of an insecure direct object reference and access control corruption vulnerability...

Tolgee 安全漏洞

Tolgee is an open source multilingual translation and localization platform designed to help development teams easily manage and maintain multilingual software applications and websites. A security vulnerability exists in Tolgee version v3.57.2, which stems from a vulnerability that allows an...

CVE-2024-3841

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. Chromium security severity: Medium...

Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System CCMS is a cyber cafe management system by the individual developer Anuj Kumar. A security vulnerability exists in phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0, which originates from a SQL injection vulnerability in file /edit-computer-detail.php...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou Yitong Technology CmsEasy. A security vulnerability exists in CmsEasy version 7.7.7.9, which originates from vulnerability to arbitrary file deletion attack...