1871
|
- |
|
-
|
-
|
A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish …
|
CWE-284 CWE-434
Improper Access Control Unrestricted Upload of File with Dangerous Type
|
CVE-2025-0346
|
2025-01-9 18:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1872
|
- |
|
-
|
-
|
A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sys/menu/listData. The manipulation of the argument order lea…
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2025-0345
|
2025-01-9 18:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1873
|
6.4 |
MEDIUM
Network
|
-
|
-
|
The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.5.135 due to insufficient input san…
|
CWE-79
Cross-site Scripting
|
CVE-2024-13153
|
2025-01-9 18:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1874
|
- |
|
-
|
-
|
A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /commpara/listData. The manipulation of the argum…
|
CWE-89 CWE-74
SQL Injection Injection
|
CVE-2025-0344
|
2025-01-9 17:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1875
|
- |
|
-
|
-
|
A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of …
|
CWE-79 CWE-94
Cross-site Scripting Code Injection
|
CVE-2025-0342
|
2025-01-9 17:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1876
|
- |
|
-
|
-
|
A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/…
|
CWE-284 CWE-434
Improper Access Control Unrestricted Upload of File with Dangerous Type
|
CVE-2025-0341
|
2025-01-9 17:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1877
|
- |
|
-
|
-
|
The <redacted>.exe or <redacted>.exe CGI binary can be used to upload arbitrary files to /tmp/upload/ or /tmp/ respectively as any user, although the user interface for uploading files is only shown …
|
-
|
CVE-2024-43662
|
2025-01-9 17:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1878
|
- |
|
-
|
-
|
Patch traversal, External Control of File Name or Path vulnerability in Iocharger Home allows deletion of arbitrary files
This issue affects Iocharger firmware for AC model before firmware version 2…
|
-
|
CVE-2024-43658
|
2025-01-9 17:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1879
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root
This issue affects Iocharger firmware for AC model chargers befo…
|
-
|
CVE-2024-43655
|
2025-01-9 17:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
1880
|
- |
|
-
|
-
|
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability allows OS Command Injection as root
This issue affects Iocharger firmware for AC models before versio…
|
-
|
CVE-2024-43651
|
2025-01-9 17:15 |
2025-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|