Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
liquidsky vulnerabilities and exploits
(subscribe to this query)
855
VMScore
CVE-2019-18873
FUDForum 3.0.9 is vulnerable to Stored XSS via the User-Agent HTTP header. This may result in remote code execution. An attacker can use a user account to fully compromise the system via a GET request. When the admin visits user information under "User Manager" in the c...
Fudforum Fudforum 3.0.9
1 EDB exploit
1 Github repository
756
VMScore
CVE-2019-18839
FUDForum 3.0.9 is vulnerable to Stored XSS via the nlogin parameter. This may result in remote code execution. An attacker can use a user account to fully compromise the system using a POST request. When the admin visits the user information, the payload will execute. This will a...
Fudforum Fudforum 3.0.9
1 Github repository
890
VMScore
CVE-2015-6435
An unspecified CGI script in Cisco FX-OS prior to 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager prior to 2.2(4b), 2.2(5) prior to 2.2(5a), and 3.0 prior to 3.0(2e) allows remote malicious users to execute arbitrary shell commands via a crafted H...
Cisco Firepower Extensible Operating System 1.1.1
Cisco Firepower Extensible Operating System 1.1\\(1.160\\)
Cisco Firepower Extensible Operating System 1.1\\(1.86\\)
Cisco Unified Computing System 3.0\\(1e\\)
Cisco Unified Computing System 3.0\\(1d\\)
Cisco Unified Computing System 2.2\\(3e\\)
Cisco Unified Computing System 2.2\\(3d\\)
Cisco Unified Computing System 2.2\\(1f\\)
Cisco Unified Computing System 2.2\\(1e\\)
Cisco Unified Computing System 2.1\\(1f\\)
Cisco Unified Computing System 2.1\\(1e\\)
Cisco Unified Computing System 1.3\\(1q\\)
Cisco Unified Computing System 1.3\\(1p\\)
Cisco Unified Computing System 1.4\\(4i\\)
Cisco Unified Computing System 1.4\\(4g\\)
Cisco Unified Computing System 1.4\\(4f\\)
Cisco Unified Computing System 2.0\\(4d\\)
Cisco Unified Computing System 2.0\\(4b\\)
Cisco Unified Computing System 2.0\\(2m\\)
Cisco Unified Computing System 2.0\\(1x\\)
Cisco Unified Computing System 1.2 Base
Cisco Unified Computing System 1.1 Base
606
VMScore
CVE-2019-12169
ATutor 2.2.4 allows Arbitrary File Upload and Directory Traversal, resulting in remote code execution via a ".." pathname in a ZIP archive to the mods/_core/languages/language_import.php (aka Import New Language) or mods/_standard/patcher/index_admin.php (aka Patcher) c...
Atutor Atutor
2 Github repositories
905
VMScore
CVE-2019-12185
eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be ...
Elabftw Elabftw 1.8.5
1 EDB exploit
1 Github repository
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started