4416 matches found
PT-2023-22359 · Pyrocms · Pyrocms
Name of the Vulnerable Software and Affected Versions: PyroCMS version 3.9 Description: The issue is a remote code execution flaw that can be exploited through a server-side template injection SSTI flaw, allowing a malicious attacker to send customized commands to the server and execute arbitrary...
PT-2023-5957 · Php +10 · Php +10
Name of the Vulnerable Software and Affected Versions: PHP versions 8.0. before 8.0.30 PHP versions 8.1. before 8.1.22 PHP versions 8.2. before 8.2.8 Description: The issue is caused by insufficient length checking when loading phar files, leading to a stack buffer overflow, which can result in...
PT-2023-24918 · Ezviz · Ezviz Cs-Cv310-A0-1C2Wfr Wifi Ip66 2.8Mm 1080P +7
Name of the Vulnerable Software and Affected Versions: EZVIZ CS-C6N-B0-1G2WF versions prior to V5.3.0 build 230215 EZVIZ CS-C6N-R101-1G2WF versions prior to V5.3.0 build 230215 EZVIZ CS-CV310-A0-1B2WFR versions prior to V5.3.0 build 230221 EZVIZ CS-CV310-A0-1C2WFR-C versions prior to V5.3.2 build...
CVE-2023-3861 phpscriptpoint Insurance search.php cross site scripting
A vulnerability was found in phpscriptpoint Insurance 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation leads to cross site scripting. The attack can be launched remotely. The identifier VDB-235213 was...
PT-2023-26389 · Rigol · Rigol Mso5000
Name of the Vulnerable Software and Affected Versions: RIGOL MSO5000 digital oscilloscope version 00.01.03.00.03 Description: The issue allows remote attackers to execute arbitrary code via shell metacharacters in pass1 to the "webcontrol changepwd.cgi" application. This is a problem with the web...
CVE-2023-3661 SourceCodester AC Repair and Services System sql injection
A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. This affects an unknown part of the file /classes/Master.php?f=saveinquiry. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...
CVE-2023-32033 Microsoft Failover Cluster Remote Code Execution Vulnerability
...
CVE-2023-37656
WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...
ROS-2-1701
2.1701 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability Description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...
PT-2023-25472 · Langchain · Langchain
Name of the Vulnerable Software and Affected Versions: langchain version 0.0.64 Description: The issue allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method. This enables the attacker to run malicious code, potentially leading to system compromise...
PT-2023-14442 · Unknown · Responsive Filemanager
Name of the Vulnerable Software and Affected Versions: Responsive Filemanager versions prior to 9.12.0 Description: The issue allows an attacker to bypass upload restrictions, resulting in remote code execution RCE. Recommendations: For versions prior to 9.12.0, update to version 9.12.0 or later ...
Important: cups-filters
Issue Overview: A vulnerability was found in cups-filters. This security flaw occurs if you use beh to create an accessible network printer, possibly resulting in remote code execution. CVE-2023-24805 Affected Packages: cups-filters Issue Correction: Run dnf update cups-filters --releasever...
CVE-2023-30261
Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request...
CVE-2020-20636
SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad function...
CVE-2020-20919
File upload vulnerability in Pluck CMS v.4.7.10-dev2 allows a remote attacker to execute arbitrary code and access sensitive information via the theme.php file...
PT-2023-25286 · Ashlar Vellum · Ashlar-Vellum Cobalt
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...
PT-2023-25284 · Ashlar Vellum · Ashlar-Vellum Cobalt
Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. It requires user interaction, such as visiting a malicious page or opening a malicious...
CVE-2023-33128
.NET and Visual Studio Remote Code Execution Vulnerability...