EUVD-2022-1627

Malicious code in bioql PyPI...

CVE-2022-25585

Unioncms v1.0.13 was discovered to contain a stored cross-site scripting XSS vulnerability via the Default settings...

CVE-2022-25585

Unioncms v1.0.13 was discovered to contain a stored cross-site scripting XSS vulnerability via the Default settings...

Cross site scripting

Unioncms v1.0.13 was discovered to contain a stored cross-site scripting XSS vulnerability via the Default settings...

CVE-2022-25585

Unioncms v1.0.13 was discovered to contain a stored cross-site scripting XSS vulnerability via the Default settings...

CVE-2022-27000

Arris TR3300 v1.0.13 is affected by a command-injection vulnerability in the time and time zone function, exploitable via h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters. The issue allows arbitrary command execution and is described across multiple sources (NVD/Red Hat/CNVD/...

CVE-2022-26998

This CVE affects Arris TR3300 v1.0.13, with a command injection vulnerability in the wps setting function through the wps_enrolee_pin parameter. The root cause is improper handling/filtering of crafted input in that parameter, enabling an attacker to execute arbitrary commands. The relevant advis...

CVE-2022-26997

CVE-2022-26997 affects Arris TR3300 v1.0.13. A command injection flaw exists in the upnp function via the upnp_ttl parameter, allowing arbitrary command execution through a crafted request. Documented impact is high (remote attacker, network access). No explicit remediation/version patch is provi...

CVE-2022-26995

Arris TR3300 v1.0.13 is affected by a command injection vulnerability in the pptp function (pptp_fix_ip, pptp_fix_mask, pptp_fix_gw, wan_dns1_stat) exposed via the pptp/wang_pptp.html endpoints. The issue arises from insufficient input validation, enabling an attacker to craft a request that exec...

freeFTPd v1.0.13 - freeFTPdService Unquoted Service Path

freeFTPd v1.0.13 - freeFTPdService Unquoted Service Path Exploit Title: freeFTPd v1.0.13 - 'freeFTPdService' Unquoted Service Path Exploit Author: boku Date: 2020-02-10 Vendor Homepage: http://www.freesshd.com Software Link: http://www.freesshd.com/freeFTPd.exe Version: 1.0.13 Tested On: Windows ...

CVE-2011-4943

ImpressPages CMS v1.0.12 has Unspecified Remote Code Execution fixed in v1.0.13...