CVE-2023-24282

An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.Read More ...

Continue Reading
CVE-2023-22892

There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.Read M ...

Continue Reading
CVE-2023-24777

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.Read More ...

Continue Reading
CVE-2021-33353

Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.Read ...

Continue Reading
CVE-2021-33351

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message f ...

Continue Reading
CVE-2021-33352

An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.Read More ...

Continue Reading
CVE-2023-1283

Code Injection in GitHub repository builderio/qwik prior to 0.21.0.Read More ...

Continue Reading
CVE-2023-1276

A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown processing of the file applicationmerchcontrollerOrder.php. The manipulation of the ar ...

Continue Reading

Back to Main

Subscribe for the latest news: