Riasztások
2025. március 28.
NA - CVE-2024-58129 - In MISP before 2.4.193,...
In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page.
2025. március 28.
NA - CVE-2024-58130 - In...
In app/Controller/Component/RestResponseComponent.php in MISP before 2.4.193, REST endpoints have a lack of sanitization for non-JSON responses.
2025. március 28.
NA - CVE-2025-25579 - TOTOLINK A3002R V4.0.0-B20230531.1404 is...
TOTOLINK A3002R V4.0.0-B20230531.1404 is vulnerable to Command Injection in /bin/boa via bandstr.
2025. március 28.
NA - CVE-2025-28087 - Sourcecodester Online Exam System 1.0 is...
Sourcecodester Online Exam System 1.0 is vulnerable to SQL Injection via dash.php.
2025. március 28.
NA - CVE-2025-28089 - maccms10 v2025.1000.4047 is vulnerable to...
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.
2025. március 28.
NA - CVE-2025-28090 - maccms10 v2025.1000.4047 is vulnerable to...
maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.
2025. március 28.
NA - CVE-2025-28091 - maccms10 v2025.1000.4047 has a Server-Side...
maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.
2025. március 28.
NA - CVE-2025-28092 - ShopXO v6.4.0 is vulnerable to Server-Side...
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) via image upload function.
2025. március 28.
NA - CVE-2025-28093 - ShopXO v6.4.0 is vulnerable to Server-Side...
ShopXO v6.4.0 is vulnerable to Server-Side Request Forgery (SSRF) in Email Settings.
2025. március 28.
NA - CVE-2025-28094 - shopxo v6.4.0 has a ssrf/xss vulnerability in...
shopxo v6.4.0 has a ssrf/xss vulnerability in multiple places.