639 matches found
CVE-2025-15070
CVE-2025-15070 affects Gmission Web Fax. PT-2025-53693 documents a missing authorization check in Gmission Web Fax versions 3.0 through 3.9, enabling an unauthorized actor to access sensitive information via authentication abuse. The issue impacts Web Fax 3.x releases prior to 4.0, including 3.0–...
CVE-2025-15069 Privilege Escalation in Gmission Web FAX
Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1...
CVE-2025-15069 Privilege Escalation in Gmission Web FAX
Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 3.0.1...
EUVD-2025-205551
Improper Authentication vulnerability in Gmission Web Fax allows Privilege Escalation.This issue affects Web Fax: from 3.0 before 4.0...
CVE-2025-66214
Ladybug adds message-based debugging, unit, system, and regression testing to Java applications. Versions prior to 3.0-20251107.114628 contain the APIs /iaf/ladybug/api/report/storage and /iaf/ladybug/api/report/upload, which allow uploading gzip-compressed XML files with user-controllable conten...
CVE-2025-66214 Ladybug has an XMLDecoder Deserialization Vulnerability (Java RCE)
Ladybug adds message-based debugging, unit, system, and regression testing to Java applications. Versions prior to 3.0-20251107.114628 contain the APIs /iaf/ladybug/api/report/storage and /iaf/ladybug/api/report/upload, which allow uploading gzip-compressed XML files with user-controllable conten...
PT-2025-50222
Name of the Vulnerable Software and Affected Versions Ladybug versions prior to 3.0-20251107.114628 Description Ladybug is a tool that adds message-based debugging, unit, system, and regression testing to Java applications. The software contains the API endpoints /iaf/ladybug/api/report/storage a...
WordPress plugin Canadian Nutrition Facts Label 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
ReQuest Serious Play Media Player 安全漏洞
ReQuest Serious Play Media Player is a media player software from ReQuest Serious Play, Inc. A security vulnerability exists in ReQuest Serious Play Media Player version 3.0 that stems from not properly validating file parameters, which could allow an attacker to read the contents of a local file...
PT-2025-47163
Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 is susceptible to Cross Site Scripting XSS. The issue is located in the aremark parameter of the ‘manage-tickets.php’ file. Exploitation occurs through manipulation ...
PT-2025-47161
Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 contains a SQL Injection flaw. This issue affects the change-password.php file through the oldpass parameter. The flaw could allow an attacker to inject malicious SQ...
CVE-2025-12916
A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portallogin of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. T...
BEO Atlas Einfuhr Ausfuhr 安全漏洞
BEO Atlas Einfuhr Ausfuhr is a software system for the automation of import and export customs declarations from BEO Germany. A security vulnerability exists in BEO Atlas Einfuhr Ausfuhr version 3.0, which stems from mishandling of specially crafted inputs for the userid and password parameters,...
Security Bulletin: IBM Content Navigator consumes vulnerable spring framework library
Summary Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions. The vulnerability involves case-sensitive patterns for disallowedFields on a DataBinder, meaning a field is not effectively protected unless it is listed with both upper and lower case for the first...
CVE-2025-0603
The CVE-2025-0603 issue is an SQL injection vulnerability in Callvision Healthcare’s Callvision Emergency Code, caused by improper neutralization of special elements in SQL commands. Affects Callvision Emergency Code versions before V3.0. Impact is high across confidentiality, integrity, and avai...
EUVD-2020-5896
Malware in sbrugna...
EUVD-2017-14877
Malware in sbrugna...
EUVD-2020-27341
Malware in sbrugna...