Lucene search
K

25 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-48618

Malicious code in bioql PyPI...

6.9CVSS5.6AI score0.00806EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-48617

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00256EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-48619

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00149EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 9:52 a.m.7 views

CVE-2024-7741

A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The...

6.9CVSS5.3AI score0.00806EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:55 a.m.5 views

CVE-2024-7743

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attac...

9.8CVSS6.7AI score0.00202EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:41 a.m.9 views

CVE-2024-7740

A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiat...

9.8CVSS6.7AI score0.00256EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 11:38 a.m.5 views

CVE-2024-7742

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is possible to launch...

9.8CVSS6.7AI score0.00149EPSS
Exploits1References1
NVD
NVD
added 2024/08/13 9:15 p.m.11 views

CVE-2024-7743

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attac...

9.8CVSS0.00202EPSS
Exploits1References4
OSV
OSV
added 2024/08/13 9:15 p.m.0 views

CVE-2024-7743

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attac...

9.8CVSS5.4AI score
Exploits0References4
OSV
OSV
added 2024/08/13 9:15 p.m.3 views

CVE-2024-7742

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is possible to launch...

9.8CVSS5.5AI score0.00149EPSS
Exploits1References4
NVD
NVD
added 2024/08/13 9:15 p.m.24 views

CVE-2024-7742

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is possible to launch...

9.8CVSS0.00149EPSS
Exploits1References4
CVE
CVE
added 2024/08/13 9:0 p.m.71 views

CVE-2024-7743

The CVE-2024-7743 issue affects wanglongcn ltcms 1.0.20, where the downloadUrl function at /api/file/downloadUrl is vulnerable to server-side request forgery via manipulation of the file argument. It can be exploited remotely and has been publicly disclosed; vendor contact attempts were unsuccess...

9.8CVSS7.2AI score0.00202EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/08/13 9:0 p.m.12 views

CVE-2024-7743 wanglongcn ltcms API Endpoint downloadUrl server-side request forgery

A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attac...

7.5CVSS7AI score0.00202EPSS
Exploits1References4
CVE
CVE
added 2024/08/13 9:0 p.m.84 views

CVE-2024-7742

The CVE-2024-7742 vulnerability affects wanglongcn ltcms 1.0.20, specifically the multiDownload function in /api/file/multiDownload. The issue arises from manipulating the file argument, leading to server-side request forgery (SSRF). It is a remote exploit, and public exploits have been disclosed...

9.8CVSS7.2AI score0.00149EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2024/08/13 8:15 p.m.13 views

CVE-2024-7741

A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The...

6.9CVSS0.00806EPSS
Exploits1References4
OSV
OSV
added 2024/08/13 8:15 p.m.2 views

CVE-2024-7741

A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The...

5.3CVSS5.5AI score
Exploits0References4
NVD
NVD
added 2024/08/13 8:15 p.m.14 views

CVE-2024-7740

A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiat...

9.8CVSS0.00256EPSS
Exploits1References4
OSV
OSV
added 2024/08/13 8:15 p.m.1 views

CVE-2024-7740

A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiat...

9.8CVSS5.5AI score0.00256EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/08/13 8:0 p.m.20 views

CVE-2024-7741 wanglongcn ltcms API Endpoint downloadfile downloadFile path traversal

A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The...

6.9CVSS0.00806EPSS
Exploits1References4
CVE
CVE
added 2024/08/13 8:0 p.m.69 views

CVE-2024-7741

CVE-2024-7741 affects wanglongcn ltcms 1.0.20. The issue is in the API Endpoint function downloadFile (/api/file/downloadfile) where manipulation of the file parameter enables path traversal. The attack could be launched remotely and the exploit has been disclosed publicly. No public details in t...

6.9CVSS5.3AI score0.00806EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder