15 matches found
CVE-2024-27844
The issue was addressed with improved checks. This issue is fixed in Safari 17.5, macOS Sonoma 14.5, visionOS 1.2. A website's permission dialog may persist after navigation away from the site...
PT-2023-17400 · Mattermost · Mattermost Desktop App
Name of the Vulnerable Software and Affected Versions: Mattermost Desktop App affected versions not specified Description: The Mattermost Desktop App has an issue where it fails to validate a Mattermost server redirection, allowing it to navigate to an arbitrary website. Recommendations: At the...
SQL injection vulnerability in Guojiz international web site navigation system (CNVD-2021-46693)
Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz International Website Navigation System has a SQL injection vulnerability, which can be exploited by...
Command execution vulnerability in the backend of the Guojiz international web site navigation system (CNVD-2021-12808)
Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. A command execution vulnerability exists in the backend of Guojiz International Website Navigation System. An...
Command execution vulnerability in the backend of the Guojiz international web site navigation system (CNVD-2021-12804)
Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz international web site navigation system back-end command execution vulnerability, an attacker can...
Command Execution Vulnerability in 162100 Website Navigation 3
162100 url navigation 3 is a website source code of url navigation category developed by php+MySQL. 162100 url navigation 3 has a command execution vulnerability. An attacker can exploit the vulnerability to write to a php file, resulting in command execution...
SQL Injection Vulnerability in Guojiz Website Navigation System
Guojiz URL navigation system is a PHP + MySQL development of URL navigation site source code. Guojiz website navigation system has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
Command Execution Vulnerability in Shenyang Huanggu District Ainong Network Technology Service Center 162100 Website Navigation
162100 website navigation is a php + MySQL development of the site navigation class website source code. Shenyang Huanggu District Ainong Network Technology Service Center 162100 URL navigation command execution vulnerabilities, attackers can use the vulnerability to obtain server privileges...
Command Execution Vulnerability in Guojiz International Website Navigation System
Guojiz International Website Navigation System is a navigation system based on thinkphp. A command execution vulnerability exists in Guojiz International Website Navigation System, which can be exploited by an attacker to gain server control privileges...
Command Execution Vulnerability in Guojiz International Web Site Navigation System (CNVD-2020-41759)
Guojiz International Website Navigation System is a navigation system based on thinkphp. There is a command execution vulnerability in the Guojiz international website navigation system that can be exploited by an attacker to gain server control privileges...
Microsoft Windows Contact File Format Arbitary Code Execution Exploit
This Metasploit module allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw is due to processing of contact...
SQL Injection Vulnerability in category.php of Ubiquitous 365 Website Category Navigation System
Uc365 website classification and navigation system is a cross-platform open source software , based on PHP + MYSQL development and construction of open source website classification and catalog management system . Uke365 website category navigation system category.php SQL injection vulnerability...
XSS Vulnerability in Ux365 Website Category Navigation System
Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system XSS vulnerability , an attacker can use the...
Uc365 website category navigation system adver_name parameter exists sql injection vulnerability
Uc365 website classification and navigation system is a cross-platform open source software, based on PHP + MYSQL development and construction of open source website classification and catalog management system. Uke365 website category navigation system advername parameter there is a sql injectio...
BadKernel Remote Code Execution Vulnerability in 2345 Website Navigation and 2345 Android Browser
2345 URL Navigation for Android is a built-in optimized browser software, 2345 Ace Browser for Android is a mobile browser. 2345 Website Navigation for Android V6.3.1 and 2345 Ace Browser for Android V8.6 use the Chrome V8 engine. The vulnerability is due to the "observeacceptinvalid" exception...