vulnerabilities and exploits

(subscribe to this query)

spring CVE_2022_22947,CVE_2022_22963,CVE_2022_22965 禅道（zentao）QVD_2024_15263 Nacos

1 Github repository

An issue in flusity-CMS v.2.33 allows a remote malicious user to execute arbitrary code via a crafted script to the edit_addon_post.php component.

1 Github repository

The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘twitter_username’ parameter in versions up to, and including, 2.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacker...

Oceanwp Ocean Extra

Kliqqi-CMS 2.0.2 is vulnerable to SQL Injection in load_data.php via the userid parameter.

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.

File Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a local malicious user to execute arbitrary code via the my_parser.php component.

An issue in Infotel Conseil GLPI v.10.X.X and after allows a remote malicious user to execute arbitrary code via the insufficient validation of user-supplied input.

1 Github repository

Buffer Overflow vulnerability in Waxlab wax v.0.9-3 and before allows an malicious user to cause a denial of service via the Lua library component.

2 Github repositories

Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote malicious user to run arbitrary code via crafted string in the URL after login.

« PREV 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook