EUVD-2023-0585

Malicious code in bioql PyPI...

Warehouse Inventory System Cross-Site Request Forgery Vulnerability (CNVD-2024-38213)

Warehouse Inventory System is a Warehouse Inventory Management System by Siamon Hasan Personal Developer. A cross-site request forgery vulnerability exists in Warehouse Inventory System v2.0, which stems from the deletegroup.php component not adequately verifying that a request comes from a trust...

GHSA-X73W-G8HX-V7RP electerm allows unauthorized users to execute arbitrary commands

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service...

electerm allows unauthorized users to execute arbitrary commands

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service...

CVE-2020-23256

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...

CVE-2020-23256

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...

Code injection

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...

CVE-2020-23256

An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service...

GREE+ application for Android cross-site request forgery vulnerability

GREE+ application for Android is an Android-based application for controlling and managing GREE air-conditioning devices from Gree Electric Appliances GREE, China. A cross-site request forgery vulnerability exists in version 1.4.0.8 of the GREE+ application for Android. The vulnerability stems fr...