dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php.Read More ...
Continue Reading
November 23, 2022
Boa 0.94.14rc21 is vulnerable to SQL Injection via username.Read More ...
Continue Reading
November 23, 2022
dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.Read More ...
Continue Reading
November 23, 2022
iTerm2 before 3.4.18 mishandles a DECRQSS response.Read More ...
Continue Reading
November 23, 2022
CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requires authenticated access tot he ChurchInfo application. Once authenticated, a use ...
Continue Reading
November 23, 2022
A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON payloads. Specially crafted JSON payloads may lead to RCE (r ...
Continue Reading
November 23, 2022
Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targeted endpoint) using the authorization requirements ...
Continue Reading
November 23, 2022
qpress before PierreLvx/qpress 20220819 and before version 11.3, as used in Percona XtraBackup and other products, allows directory traversal via ../ in a .qp file.Read More ...
Continue Reading
November 23, 2022
Back to Main
