CVE-2025-25992

CVE-2025-25992 corresponds to a SQL injection in FeMiner wms 1.0. Multiple connected sources (CNVD-2025-03952, RH, NVD, CNNVD) describe the issue as arising from the lack of validation of externally entered SQL statements in the iquel_inout_item.php component, enabling an attacker to obtain sensi...

CVE-2022-33295

Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length...

CVE-2024-57760

JeeWMS before v2025.01.01 was discovered to contain a SQL injection vulnerability via the ReportId parameter at /core/CGReportDao.java...

PT-2025-3555 · Jeewms · Jeewms

Name of the Vulnerable Software and Affected Versions: JeeWMS versions prior to 2025.01.01 Description: The issue is related to an arbitrary file upload vulnerability in the parserXML method. This allows attackers to execute arbitrary code via uploading a crafted file. There is no information...

JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the saveOrUpdate function...

CVE-2024-49107

WmsRepair Service Elevation of Privilege Vulnerability...

GeoServer < 2.23.4 Multiples Vulnerabilities

According to its banner, the version of GeoServer running on the remote host is prior to 2.23.5 or 2.24.0 prior to 2.24.2. It is, therefore, affected by Multiples Vulnerabilities : - An Arbitrary file upload vulnerability in REST Coverage Store API - A Stored Cross-Site Scripting XSS vulnerabilit...

CVE-2024-52732

Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...

CVE-2024-52732

CVE-2024-52732 affects wms-Warehouse management system-zeqp v2.20.9.1. The root cause is incorrect access control caused by reuse of the zeqp system token, enabling unauthorized access. Documented impact indicates high confidentiality and integrity risk with a critical CVSS:3.1 score (AV:N, AC:L,...

CVE-2024-52732

Incorrect access control in wms-Warehouse management system-zeqp v2.20.9.1 due to the token value of the zeqp system being reused...

Malicious code in wms-printer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41ff2a05e27682f3bd0effb5750b0d0b26312deafd88f3eff71b6e0d1f5aec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-11019 Malicious code in wms-printer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41ff2a05e27682f3bd0effb5750b0d0b26312deafd88f3eff71b6e0d1f5aec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-49596

Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...

CVE-2024-49597

Dell Wyse Management Suite, versions WMS 4.4 and prior, contain an Improper Restriction of Excessive Authentication Attempts vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass...

Exploit for Code Injection in Geoserver

CVE-2024-36401-poc CVE-2024-36401 is a high-risk remote code...

Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10665 Malicious code in eslint-plugin-wms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d4b20357cf95acf41bc1718eeb796b29f01f318a9874d59cd4ef1a87dd4cadc4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Huawei HarmonyOS/EMUI Access Privilege Verification Vulnerability

Huawei HarmonyOS is a distributed operating system developed independently by Huawei Technologies Co. Huawei EMUI is Huawei's emotional operating system based on Android. Huawei HarmonyOS/EMUI suffers from an access privilege authentication vulnerability, which originates from an access privilege...

CVE-2024-45444

Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2024-45444

Access permission verification vulnerability in the WMS module Impact: Successful exploitation of this vulnerability may affect service confidentiality...