Lucene search
K

9 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-52655

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00469EPSS
Exploits0References2
NVD
NVD
added 2025/01/09 8:15 p.m.13 views

CVE-2024-54724

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion...

9.8CVSS0.00469EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/01/09 12:0 a.m.7 views

CVE-2024-54724

PHPYun before 7.0.2 is vulnerable to code execution through backdoor-restricted arbitrary file writing and file inclusion...

7.8AI score0.00469EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/10/15 12:0 a.m.2 views

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise allows a perpetrator to execute arbitrary code.

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by writing a file to the Windows system’s root directory...

9CVSS6AI score0.04059EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/07/09 7:15 a.m.11 views

CVE-2024-28749

A remote attacker with high privileges may use a writing file function to inject OS commands...

7.2CVSS0.00835EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/09 7:10 a.m.8 views

CVE-2024-28749 ifm: Writing file function in Smart PLC allows command injections

A remote attacker with high privileges may use a writing file function to inject OS commands...

7.2CVSS6.9AI score0.00835EPSS
Exploits0References1
CVE
CVE
added 2024/07/09 7:10 a.m.46 views

CVE-2024-28749

CVE-2024-28749 affects ifm electronic Smart PLC AC14xx/AC4xxS via the Write to File function, enabling OS command injections by a remote attacker with elevated privileges. The issue is described as an OS command injection originating from a remote attacker with high privileges; CVSSv3.1 base scor...

7.2CVSS6.9AI score0.00835EPSS
Exploits0References1
OSV
OSV
added 2023/12/22 8:43 p.m.7 views

CVE-2023-50731 MindsDB has arbitrary file write in file.py

MindsDB is a SQL Server for artificial intelligence. Prior to version 23.11.4.1, the put method in mindsdb/mindsdb/api/http/namespaces/file.py does not validate the user-controlled name value, which is used in a temporary file name, which is afterwards opened for writing on lines 122-125, which...

9.1CVSS9.3AI score0.00219EPSS
Exploits1References6
Exploit DB
Exploit DB
added 2010/04/23 12:0 a.m.27 views

lanewsfactory - Multiple Vulnerabilities

LaNewsFactory Multiple Remote Vulnerabilities http://www.salvatorefresta.net/files/adv/LaNewsFactory%20Multiple%20Remote%20Vulnerabilities-19042010.txt Name LaNewsFactory Vendor Christophe Brocas Versions Affected = 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.n...

7.4AI score
Exploits0
Rows per page
Query Builder