477 matches found
CVE-2026-29933
A reflected cross-site scripting XSS vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context of the user's browser via modifying the referrer value in the request header...
CVE-2022-23888
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey CSRF via the component /yzmcms/comment/index/init.html...
CVE-2022-23383
YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non...
CVE-2022-23384
YzmCMS v6.3 is affected by Cross Site Request Forgery CSRF in /admin.add...
CVE-2022-23887
YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...
CVE-2019-16532
An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections...
EUVD-2021-23306
Malware in sbrugna...
EUVD-2019-7206
Malware in sbrugna...
EUVD-2018-19210
Malware in sbrugna...
EUVD-2020-11025
Malware in sbrugna...
EUVD-2020-15156
Malware in sbrugna...
EUVD-2020-11847
Malware in sbrugna...
EUVD-2020-16116
Malware in sbrugna...
EUVD-2018-10807
Malware in sbrugna...
EUVD-2019-19026
Malware in sbrugna...
EUVD-2019-7239
Malware in sbrugna...
EUVD-2019-18941
Malware in sbrugna...
EUVD-2018-3581
Malware in sbrugna...