12 matches found
EUVD-2026-15625
Deserialization of Untrusted Data vulnerability in parkofideas KIDZ kidz allows Object Injection.This issue affects KIDZ: from n/a through = 5.24...
PT-2026-27888
Name of the Vulnerable Software and Affected Versions KIDZ versions n/a through 5.24 Description An issue exists in park of ideas KIDZ kidz that allows for object injection due to deserialization of untrusted data. This could potentially allow for malicious code execution. Recommendations Version...
CVE-2025-36592
Dell Secure Connect Gateway SCG Policy Manager, versions 5.20. 5.22, 5.24, 5.26, 5.28, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading...
CVE-2024-47241
Dell Secure Connect Gateway SCG 5.0 Appliance - SRS, versions 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data...
Pi-hole FTLDNS < 5.25 Multiple DoS Vulnerabilities (KeyTrap)
Pi-hole FTLDNS is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CiviCRM 代码问题漏洞
CiviCRM is an open source, cloud-based member relationship management CRM system developed specifically to meet the needs of nonprofit and association-based organizations. A code issue vulnerability exists in CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3 versions, which allows an...
FTPShell Client 5.24 - Add to Favorites Buffer Overflow
Exploit for windows platform in category local exploits Exploit Title: FTPShell Client 5.24 - Add to Favorites Buffer Overflow Google Dork: N/A Date: 2015-01-04 Exploit Author: INSECT.B Twitter : @INSECT.B Facebook : https://www.facebook.com/B.INSECT00 Blog : http://binsect00.tistory.com Vendor...
FTPShell Client 5.24 - Local Buffer Overflow
FTPShell Client 5.24 - Local Buffer Overflow ''' + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/FTPSHELL-v5.24-BUFFER-OVERFLOW.txt Vendor: ================================ www.ftpshell.com Product: ================================...
Twilight CMS 5.17 Cross Site Scripting
Advisory ID: HTB23166 Product: Twilight CMS Vendor: Strata Technologies LLC Vulnerable Versions: 5.17 and probably prior Tested Version: 5.17 Vendor Notification: July 24, 2013 Vendor Patch: August 15, 2013 Public Disclosure: August 21, 2013 Vulnerability Type: Cross-Site Scripting CWE-79 CVE...
PHP Pro Bid 5.2.4 - viewfeedback.php Multiple SQL Injections
PHP Pro Bid 5.2.4 - viewfeedback.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...
PHP Pro Bid 5.2.4 - 'categories.php?orderType' SQL Injection
source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful exploit of these vulnerabilities...
PHP Pro Bid 5.2.4 - auctionsearch.php?advsrc Cross-Site Scripting
PHP Pro Bid 5.2.4 - auctionsearch.php?advsrc Cross-Site Scripting source: https://www.securityfocus.com/bid/19158/info PHP Pro Bid is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize...