The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the userâs compute ...
Continue ReadingFebruary 22, 2023
A Local File Inclusion (LFI) vulnerability in interface/forms/LBF/new.php in OpenEMR Read More ...
Continue ReadingFebruary 22, 2023
Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vulnerable to PHP Type Juggling in file /var/www/login.php, allows attackers to gain escalated privileges only when specific conditions regard ...
Continue ReadingFebruary 22, 2023
File upload vulnerability in Instantdeveloper RD3 22.0.8500, allows attackers to execute arbitrary code.Read More ...
Continue ReadingFebruary 22, 2023
Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary c ...
Continue ReadingFebruary 22, 2023
This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will b ...
Continue ReadingFebruary 22, 2023
Sequelize is a Node.js ORM tool. In versions prior to 6.19.1 a SQL injection exploit exists related to replacements. Parameters which are passed through replacements are not properly escaped which can ...
Continue ReadingFebruary 22, 2023
Misskey is an open source, decentralized social media platform. In versions prior to 13.5.0 the link to the instance to the sender that appears when viewing a user or note received through ActivityPub ...
Continue ReadingFebruary 22, 2023
Back to Main