CVE-2023-1177
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
Github link:
https://github.com/saimahmed/MLflow-Vuln
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
Github link:
https://github.com/saimahmed/MLflow-Vuln
GitHub
GitHub - saimahmed/MLflow-Vuln: MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced
MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced - saimahmed/MLflow-Vuln
CVE-2019-11447
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)
Github link:
https://github.com/ojo5/CVE-2019-11447.c
An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)
Github link:
https://github.com/ojo5/CVE-2019-11447.c
GitHub
GitHub - ojo5/CVE-2019-11447.c: CVE-2019-11447 written in C
CVE-2019-11447 written in C. Contribute to ojo5/CVE-2019-11447.c development by creating an account on GitHub.
CVE-2023-41425
Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.
Github link:
https://github.com/tiyeume25112004/CVE-2023-41425
Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.
Github link:
https://github.com/tiyeume25112004/CVE-2023-41425
GitHub
GitHub - tiyeume25112004/CVE-2023-41425: Research
Research. Contribute to tiyeume25112004/CVE-2023-41425 development by creating an account on GitHub.