26 matches found
CVE-2023-34965
CVE-2023-34965 SSPanel UIM è un sistema di gestione delle vendite di servizi multi-agenzia appositamente progettato per i protocolli Shadowsocks / V2Ray / Trojan. La versione di SSPanel-Uim precedente alla 2023.3 non limita l'accesso all'interfaccia /link/, il che può portare a una fuga di...
EUVD-2026-52981
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...
CVE-2026-18818
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...
CVE-2026-18818
CVE-2026-18818 concerns Ehco1996 django-sspanel. The vulnerability targets the TicketDetailView in apps/sspanel/views.py of the Support Ticket Handler and allows authorization bypass via manipulation, with remote execution possible. Affected software is stated as up to 2023.12.26 and no longer un...
CVE-2026-18818 Ehco1996 django-sspanel Support Ticket views.py TicketDetailView authorization
A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The...
EUVD-2023-42701
Malicious code in bioql PyPI...
EUVD-2023-39004
Malicious code in bioql PyPI...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
Command injection
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
django-sspanel Command Injection Vulnerability
django-sspanel is a new shadowsocks web panel developed with diango by Ehco Personal Developers. A security vulnerability exists in django-sspanel version v2022.2.2, which stems from a Remote Command Execution RCE vulnerability in the GoodsCreateView.post method of sspanel/adminview.py...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
PT-2023-26698
Name of the Vulnerable Software and Affected Versions django-sspanel version 2022.2.2 Description The software contains a remote command execution RCE issue through the GoodsCreateView. post component within sspanel/admin view.py. The software is used in proxy services, potentially leading to...
CVE-2023-38941
django-sspanel v2022.2.2 was discovered to contain a remote command execution RCE vulnerability via the component sspanel/adminview.py - GoodsCreateView.post...
CVE-2023-38941
The CVE-2023-38941 entry relates to django-sspanel v2022.2.2, with a remote command execution (RCE) vulnerability exposed through sspanel/admin_view.py -> GoodsCreateView._post. The connected sources consistently describe an RCE impact in this specific version; no vendor-provided patch Version...
The vulnerability of the SSPanel-Uim software interface allows a perpetrator to access confidential information.
The vulnerability of the SSPanel-Uim software interface is related to improper authorization. Exploiting this vulnerability can allow attackers to access confidential information...