DocsGPT Allows Remote Code Execution

A vulnerability, that could result in Remote Code Execution RCE, has been found in DocsGPT. Due to improper parsing of JSON data using eval an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint. This issue affects DocsGPT: from 0.8.1 through 0.12.0...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692-poc CVE-2024-23692 is a template injection vu...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67093)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause an unauthorized partial denial of service partial DOS of MySQL Server...

Google Chrome File System API信息泄露漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which is caused by the window.showSaveFilePicker function that parses and returns environment variable values to the user when passing environment variables, which can be exploited by an attacker to...

D-Link DCS-2530L Camera Unauthorized RCE 0day Vulnerability

The D-Link DCS-2530L is a camera from AUO D-Link. The D-Link DCS-2530L camera suffers from an unauthorized RCE 0day vulnerability that can be exploited by an attacker to execute arbitrary commands on the target device as root to execute arbitrary commands on the target device...

CVE-2019-11488

The CVE-2019-11488 entry concerns SimplyBook.me Enterprise prior to 2019-04-23, where an Incorrect Access Control flaw in the Account Access / Password Reset Link could allow unauthorized attackers to read/write Customer or Administrator data via a persistent HTTP GET hash link replay (demonstrat...

CVE-2017-8196

FusionSphere V100R006C00SPC102NFV has an incorrect authorization vulnerability. An authenticated attacker could execute commands that he/she should have had no permission to perform, thereby querying, modifying, and deleting certain service data and making the service unavailable...