CVE-2023-25709

Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin Read More ...

Continue Reading
CVE-2023-27235

An arbitrary file upload vulnerability in the admincCommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file.Read More ...

Continue Reading
CVE-2023-27234

A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application.Read More ...

Continue Reading
CVE-2023-27240

Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip.Read More ...

Continue Reading
CVE-2023-1407

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/m ...

Continue Reading
CVE-2023-27757

An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JPG file.Read More ...

Continue Reading
CVE-2023-28371

In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal.Read More ...

Continue Reading
CVE-2023-27539

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...

Continue Reading

Back to Main

Subscribe for the latest news: