EUVD-2024-2475

Malicious code in bioql PyPI...

CVE-2022-39383

CVE-2022-39383 describes a blind SSRF in the KubeVela VelaUX APIserver when using Helm Chart as the component delivery method, where the warehouse request address is not restricted. This affects KubeVela’s VelaUX APIserver and enables an SSRF vulnerability. Public reports and advisories (GitHub G...

CVE-2022-36225

CVE-2022-36225 affects EyouCMS v1.5.8-UTF8-SP1. A CSRF vulnerability exists in the backend-related features: background, column management, and add functions. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with network attack vector, user interaction required, and impacts to confidentiality,...

CVE-2022-31180

Shescape is a simple shell escape package for JavaScript. Affected versions were found to have insufficient escaping of white space when interpolating output. This issue only impacts users that use the escape or escapeAll functions with the interpolation option set to true. The result is that if ...

CVE-2022-31179 Insufficient escaping of line feeds for CMD in shescape

Shescape is a simple shell escape package for JavaScript. Versions prior to 1.5.8 were found to be subject to code injection on windows. This impacts users that use Shescape any API function to escape arguments for cmd.exe on Windows An attacker can omit all arguments following their input by...

CVE-2021-28856

In Deark before v1.5.8, a specially crafted input file can cause a division by zero in src/fmtutil.c because of the value of pixelsize...

Chi Rui school website management system V1. 5. 8 injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability file: UserAdd. asp UserAdd. asp? Result=Modify&ID=1 5 8 and 1=2 union select 1,2,3,4,adminname,password,7,8,9,1 0,1 1,1 2,1 3,1 4,1 5,1 6 from zhiruismanage Test results: Get the Management User and password...

ASPCode CMS Cross Site Request Forgery / Cross Site Scripting

Multiple Vulnerability in ASPCode CMS Software Version: yahoo.it - ictsec.wordpress.com 1 - Multiple XSS Vulnerability http://host/default.asp?sec=1&ma1="alert"XSS"; http://host/default.asp?sec=1&tag="alert"XSS"; http://host/default.asp?sec=1&ma2="alert"XSS"; XSS found also on Form to reset...