Sudo before 1.9.13 does not escape control characters in sudoreplay output.Read More ...
Continue Reading
March 16, 2023
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.Read More ...
Continue Reading
March 16, 2023
OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with the ping_addr parameter to ping.ccp.Read More ...
Continue Reading
March 16, 2023
Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker toescalate privileges via the AddUser method of the UserController function in Tenant Management module.Read More ...
Continue Reading
March 16, 2023
SQL Injection vulnerability found in Kirin Fortress Machine v.1.7-2020-0610 allows attackers to execute arbitrary code via the /admin.php?controller=admin_commonuser parameter.Read More ...
Continue Reading
March 16, 2023
An issue found in Ofcms v.1.1.4 allows a remote attacker to to escalate privileges via the respwd method in SysUserController.Read More ...
Continue Reading
March 16, 2023
Permissions vulnerability found in isoftforce Dreamer CMS v.4.0.1 allows local attackers to obtain sensitive information via the AttachmentController parameter.Read More ...
Continue Reading
March 16, 2023
SA-WR915ND router firmware v17.35.1 was discovered to be vulnerable to code execution.Read More ...
Continue Reading
March 16, 2023
Back to Main
