Güvenlik Açıkları arşivleri

ICT Protege GX/WX 2.08 – Stored Cross-Site Scripting (XSS) Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[local] Sysax FTP Automation 6.9.0 – Privilege Escalation

Sysax FTP Automation 6.9.0 – Privilege Escalation Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[remote] Ivanti Endpoint Manager 4.6 – Remote Code Execution (RCE)

Ivanti Endpoint Manager 4.6 – Remote Code Execution (RCE) Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[remote] iRZ Mobile Router – CSRF to RCE

iRZ Mobile Router – CSRF to RCE Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

[webapps] ICEHRM 31.0.0.0S – Cross-site Request Forgery (CSRF) to Account Takeover

ICEHRM 31.0.0.0S – Cross-site Request Forgery (CSRF) to Account Takeover Exploit ile ilgili teknik detaylar için Devamını Oku Kaynak: Exploit-DB.com RSS Feed

CVE-2021-40662

A Cross-Site Request Forgery (CSRF) in Chamilo LMS 1.11.14 allows attackers to execute arbitrary commands on victim hosts via user interaction with a crafted URL.…

CVE-2021-38745

Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This…

CVE-2021-46390

An access control issue in the authentication module of Lexar_F35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service (DoS). An…

CVE-2022-0627

The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a…

CVE-2022-0628

The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to…