Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snippet function of the metersphere system workbenchRea ...
Continue Reading
May 08, 2023
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component attachmentSystemAttachmentServices.php.Read More ...
Continue Reading
May 08, 2023
Judging Management System v1.0 is vulnerable to SQL Injection. via /php-jms/review_se_result.php?mainevent_id=.Read More ...
Continue Reading
May 08, 2023
OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0.Read More ...
Continue Reading
May 07, 2023
A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the compone ...
Continue Reading
May 07, 2023
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Hu-manity.Co Cookie Notice & Compliance for GDPR / CCPA plugin Read More ...
Continue Reading
May 07, 2023
The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server.Read More ...
Continue Reading
May 07, 2023
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Samuel Marshall JCH Optimize plugin Read More ...
Continue Reading
May 07, 2023
Back to Main
