π¨ CVE-2015-20107
In Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments).
π@cveNotify
In Python (aka CPython) through 3.10.4, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input (if they lack validation of user-provided filenames or arguments).
π@cveNotify
GitHub
[CVE-2015-20107] mailcap.findmatch: document shell command Injection danger in filename parameter Β· Issue #68966 Β· python/cpython
BPO 24778 Nosy @vstinner, @bitdancer Files screenshot.pngThe Quote Problem.pymailcap patch.zip: mailcap.py patches and diffs for python2.7 and python 3.5 Note: these values reflect the state of the...
π¨ CVE-2017-20081
A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This affects an unknown part of the file /admin/reports.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Vuldb
CVE-2017-20081 | Hindu Matrimonial Script reports.php privileges management (EDB-41044 / EDB-41044)
A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. This vulnerability is uniquely identified as CVE-2017-20081.
π¨ CVE-2017-20080
A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is some unknown functionality of the file /admin/googleads.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. Affected by this issue is some unknown functionality of the file /admin/googleads.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Exploit Database
Hindu Matrimonial Script - Authentication Bypass
Hindu Matrimonial Script - Authentication Bypass.. webapps exploit for PHP platform
π¨ CVE-2017-20079
A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unknown functionality of the file /admin/photo.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability classified as critical was found in Hindu Matrimonial Script. Affected by this vulnerability is an unknown functionality of the file /admin/photo.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Exploit Database
Hindu Matrimonial Script - Authentication Bypass
Hindu Matrimonial Script - Authentication Bypass.. webapps exploit for PHP platform
π¨ CVE-2017-20078
A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability classified as critical has been found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/featured.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Exploit Database
Hindu Matrimonial Script - Authentication Bypass
Hindu Matrimonial Script - Authentication Bypass.. webapps exploit for PHP platform
π¨ CVE-2017-20077
A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown processing of the file /admin/success_story.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. This issue affects some unknown processing of the file /admin/success_story.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Vuldb
CVE-2017-20077 | Hindu Matrimonial Script success_story.php privileges management (EDB-41044 / EDB-41044)
A vulnerability was found in Hindu Matrimonial Script. It has been rated as critical. The identification of this vulnerability is CVE-2017-20077.
π¨ CVE-2017-20076
A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unknown code of the file /admin/searchview.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability affects unknown code of the file /admin/searchview.php. The manipulation leads to improper privilege management. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Vuldb
CVE-2017-20076 | Hindu Matrimonial Script searchview.php privileges management (EDB-41044 / EDB-41044)
A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. This vulnerability was named CVE-2017-20076.
π¨ CVE-2017-20075
A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This affects an unknown part of the file /admin/payment.php. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Vuldb
CVE-2017-20075 | Hindu Matrimonial Script payment.php privileges management (EDB-41044 / EDB-41044)
A vulnerability was found in Hindu Matrimonial Script. It has been classified as critical. This vulnerability is uniquely identified as CVE-2017-20075.
π¨ CVE-2017-20074
A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability was found in Hindu Matrimonial Script and classified as critical. Affected by this issue is some unknown functionality of the file /admin/newsletter1.php. The manipulation leads to improper privilege management. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Vuldb
CVE-2017-20074 | Hindu Matrimonial Script newsletter1.php privileges management (EDB-41044 / EDB-41044)
A vulnerability was found in Hindu Matrimonial Script and classified as critical. This vulnerability is handled as CVE-2017-20074.
π¨ CVE-2017-20073
A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability has been found in Hindu Matrimonial Script and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/cms.php. The manipulation leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Exploit Database
Hindu Matrimonial Script - Authentication Bypass
Hindu Matrimonial Script - Authentication Bypass.. webapps exploit for PHP platform
π¨ CVE-2017-20072
A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/generalsettings.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability, which was classified as critical, was found in Hindu Matrimonial Script. Affected is an unknown function of the file /admin/generalsettings.php. The manipulation leads to improper privilege management. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Exploit Database
Hindu Matrimonial Script - Authentication Bypass
Hindu Matrimonial Script - Authentication Bypass.. webapps exploit for PHP platform
π¨ CVE-2017-20071
A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some unknown processing of the file /admin/renewaldue.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. This issue affects some unknown processing of the file /admin/renewaldue.php. The manipulation leads to improper privilege management. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
π@cveNotify
Vuldb
CVE-2017-20071 | Hindu Matrimonial Script renewaldue.php privileges management (EDB-41044 / EDB-41044)
A vulnerability, which was classified as critical, has been found in Hindu Matrimonial Script. The identification of this vulnerability is CVE-2017-20071.
π¨ CVE-2022-23074
In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the βNameβ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and can lead to admin's account takeover.
π@cveNotify
In Recipes, versions 0.17.0 through 1.2.5 are vulnerable to Stored Cross-Site Scripting (XSS), in the βNameβ field of Keyword, Food and Unit components. When a victim accesses the Keyword/Food/Unit endpoints, the XSS payload will trigger. A low privileged attacker will have the victim's API key and can lead to admin's account takeover.
π@cveNotify
Mend.io
Mend Vulnerability Database
Learn everything you need about CVE-2022-23074: type, severity, remediation & recommended fix, affected languages.
π¨ CVE-2022-26362
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, the logic for acquiring a type reference has a race condition, whereby a safely TLB flush is issued too early and creates a window where the guest can re-establish the read/write mapping before writeability is prohibited.
π@cveNotify
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, the logic for acquiring a type reference has a race condition, whereby a safely TLB flush is issued too early and creates a window where the guest can re-establish the read/write mapping before writeability is prohibited.
π@cveNotify
π¨ CVE-2022-33139
A vulnerability has been identified in SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.
π@cveNotify
A vulnerability has been identified in SIMATIC WinCC OA V3.16 (All versions in default configuration), SIMATIC WinCC OA V3.17 (All versions in non-default configuration), SIMATIC WinCC OA V3.18 (All versions in non-default configuration). Affected applications use client-side only authentication, when neither server-side authentication (SSA) nor Kerberos authentication is enabled. In this configuration, attackers could impersonate other users or exploit the client-server protocol without being authenticated.
π@cveNotify
π¨ CVE-2022-33119
NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via login.php.
π@cveNotify
NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via login.php.
π@cveNotify
GitHub
nuuo-xss/README.md at main Β· badboycxcc/nuuo-xss
Contribute to badboycxcc/nuuo-xss development by creating an account on GitHub.
π¨ CVE-2022-32414
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_vmcode_interpreter at src/njs_vmcode.c.
π@cveNotify
Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njs_vmcode_interpreter at src/njs_vmcode.c.
π@cveNotify
GitHub
SEGV njs_vmcode.c:802:27 in njs_vmcode_interpreter Β· Issue #483 Β· nginx/njs
Environment OS : Linux ubuntu 5.13.0-27-generic #29~20.04.1-Ubuntu SMP Fri Jan 14 00:32:30 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux Commit : f65981b0b8fcf02d69a40bc934803c25c9f607ab Version : 0.7.2 ...
π¨ CVE-2022-31374
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
π@cveNotify
An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file.
π@cveNotify
GitHub
GitHub - badboycxcc/SolarView_Compact_6.0_upload
Contribute to badboycxcc/SolarView_Compact_6.0_upload development by creating an account on GitHub.
π¨ CVE-2022-31373
SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.
π@cveNotify
SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.
π@cveNotify
GitHub
GitHub - badboycxcc/SolarView_Compact_6.0_xss
Contribute to badboycxcc/SolarView_Compact_6.0_xss development by creating an account on GitHub.
π¨ CVE-2022-25585
Unioncms v1.0.13 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Default settings.
π@cveNotify
Unioncms v1.0.13 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Default settings.
π@cveNotify
GitHub
Stored XSS exists Β· Issue #5 Β· union-home/unioncms
1.The problem is in system settings - basic settings - default settings - third party code writeοΌ<script>alert(1)</script> Save, open the home page and the XSS code will pop up The prob...