An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file.Read More ...
Continue ReadingMarch 08, 2023
There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.Read M ...
Continue ReadingMarch 08, 2023
Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list.Read More ...
Continue ReadingMarch 08, 2023
Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.Read ...
Continue ReadingMarch 08, 2023
Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message f ...
Continue ReadingMarch 08, 2023
An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.Read More ...
Continue ReadingMarch 08, 2023
Code Injection in GitHub repository builderio/qwik prior to 0.21.0.Read More ...
Continue ReadingMarch 08, 2023
A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown processing of the file applicationmerchcontrollerOrder.php. The manipulation of the ar ...
Continue ReadingMarch 08, 2023
Back to Main