Riasztások | HunCERT group

28 Mar 2025

NA - CVE-2025-25579 - TOTOLINK A3002R V4.0.0-B20230531.1404 is...

TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.

28 Mar 2025

Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.

28 Mar 2025

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.

28 Mar 2025

maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.

28 Mar 2025

maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.

28 Mar 2025

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.

28 Mar 2025

ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings.

28 Mar 2025

shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.

28 Mar 2025

OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.

28 Mar 2025

OneNav 1.1.0 is vulnerable to Cross Site Scripting (XSS) in custom headers.