Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-27161 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T21:41:04.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://jellyfin.com - https://github.com/jellyfin/jellyfin - https://notes.sjtu.edu.cn/s/yJ9lPk09a - https://gist.github.com/b33t1e/5c067e0538a0b712dc3d59bd4b9a5952
CVE ID: CVE-2023-27162 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-18T16:08:32.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://openapi-generator.com - https://github.com/OpenAPITools/openapi-generator - https://notes.sjtu.edu.cn/s/2_yki_2Xq - https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b8
ools/openapi-generator - https://notes.sjtu.edu.cn/s/2_yki_2Xq - https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08
CVE ID: CVE-2023-27163 State: PUBLISHED Published: 2023-03-31T00:00:00.000Z Last Updated: 2025-02-18T16:06:42.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://notes.sjtu.edu.cn/s/MUUhEymt7 - http://request-baskets.com - https://github.com/darklynx/request-baskets - https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3 - http://
https://github.com/darklynx/request-baskets - https://gist.github.com/b33t1e/3079c10c88cad379fb166c389ce3b7b3 - http://packetstormsecurity.com/files/174129/Maltrail-0.53-Remote-Code-Execution.html - http://packetstormsecurity.com/files/174128/Request-Baskets-1.2.1-Server-Side-Request-Forgery.html
CVE ID: CVE-2023-27164 State: PUBLISHED Published: 2023-03-10T00:00:00.000Z Last Updated: 2025-02-28T16:49:40.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Halo up to v1.6.1 allows attackers to execute arbitrary code via a crafted .md file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://halo.com - https://github.com/halo-dev/halo - https://notes.sjtu.edu.cn/s/s5oEvs-p5 - https://gist.github.com/b33t1e/a1a0d81b1173d0d00de8f4e7958dd867
CVE ID: CVE-2023-27167 State: PUBLISHED Published: 2023-03-29T00:00:00.000Z Last Updated: 2025-05-05T16:03:07.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://suprema.com - https://biostar2.ciklum.net/api/users/absence?search_month=1 - https://www.linkedin.com/in/yuriy-tsarenko-a1453aa4/ - https://protey.net/threads/cve-2023-27167-suprema-biostar-2-v2-8-16-sql-injection.995/ - https://packetstormsecurity.com/files/171523/Suprema-BioStar-2-2.8.
27167-suprema-biostar-2-v2-8-16-sql-injection.995/ - https://packetstormsecurity.com/files/171523/Suprema-BioStar-2-2.8.16-SQL-Injection.html
CVE ID: CVE-2023-27168 State: PUBLISHED Published: 2024-01-19T00:00:00.000Z Last Updated: 2025-06-02T15:03:04.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://writeback4t.com - https://www.xpand-it.com - https://balwurk.com - https://balwurk.github.io/CVE-2023-27168/
CVE ID: CVE-2023-27169 State: PUBLISHED Published: 2023-09-12T00:00:00 Last Updated: 2024-09-26T16:11:57.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric encryption keys for license generation and validation. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://writeback4t.com - https://www.xpand-it.com - https://balwurk.com - https://balwurk.com/cve-use-of-hard-coded-cryptographic-key/
CVE ID: CVE-2023-27170 State: PUBLISHED Published: 2023-10-26T00:00:00 Last Updated: 2024-09-10T16:30:45.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://balwurk.com/cve-2023-27170-improper-limitation-of-a-pathname-to-a-restricted-directory/
CVE ID: CVE-2023-27171 State: REJECTED Published: N/A Last Updated: 2023-12-13T14:04:21.780712 Description: No description available.
CVE ID: CVE-2023-27172 State: PUBLISHED Published: 2023-12-20T00:00:00.000Z Last Updated: 2025-05-06T18:48:19.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://balwurk.github.io/CVE-2023-27172/
CVE ID: CVE-2023-27178 State: PUBLISHED Published: 2023-04-10T00:00:00.000Z Last Updated: 2025-02-11T15:59:47.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf#L5-6 - https://www.gdidees.eu/cms-1-0.html - https://nvd.nist.gov/vuln/detail/CVE-2022-40797 - https://gist.github.com/Hadi999/4bc173bfb802c229b9bb397fa906847b
CVE ID: CVE-2023-27179 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T15:43:34.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://knowledge-base.secureflag.com/vulnerabilities/unrestricted_file_download/unrestricted_file_download_vulnerability.html - https://www.gdidees.eu/cms-1-0.html - https://gist.github.com/Hadi999/516aa25b953b0cba57089a0c11b1305b - http://packetstormsecurity.com/files/171894/GDidees
- https://gist.github.com/Hadi999/516aa25b953b0cba57089a0c11b1305b - http://packetstormsecurity.com/files/171894/GDidees-CMS-3.9.1-Local-File-Disclosure-Directory-Traversal.html
CVE ID: CVE-2023-27180 State: PUBLISHED Published: 2023-04-07T00:00:00.000Z Last Updated: 2025-02-12T17:12:02.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/backup.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.gdidees.eu/cms-1-0.html - https://github.com/chamilo/pclzip - https://gist.github.com/Hadi999/d691e35d4f494d37ccc5638e68227606
CVE ID: CVE-2023-27191 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T15:36:12.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.dualspace.com/pc/en/products.html - https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27191/CVE%20detail.md
CVE ID: CVE-2023-27192 State: PUBLISHED Published: 2023-04-11T00:00:00.000Z Last Updated: 2025-02-11T21:07:46.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the key_wifi_safe_net_check_url, KEY_Cirus_scan_whitelist and KEY_AD_NEW_USER_AVOID_TIME parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.dualspace.com/pc/en/products.html - https://apkpure.com/cn/super-security-virus-cleaner/com.ludashi.security - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27192/CVE%20detail.md
CVE ID: CVE-2023-27193 State: PUBLISHED Published: 2023-04-14T00:00:00.000Z Last Updated: 2025-02-07T15:59:32.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in DUALSPACE v.1.1.3 allows a local attacker to gain privileges via the key_ad_new_user_avoid_time field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.dualspace.com/pc/en/products.html - https://apkpure.com/cn/space-clean-super-cleaner/com.ludashi.xsuperclean - https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27193/CVE%20detail.md
CVE ID: CVE-2023-27195 State: PUBLISHED Published: 2024-11-08T00:00:00 Last Updated: 2024-11-08T15:10:45.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use this access code to register a valid account. via a PUT /inc/tm_ajax.msw request. If the access code was used to create an Administrator account, attackers are also able to register new Administrator accounts with full privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://transportation.trimble.com/products/TM4Web
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://transportation.trimble.com/products/TM4Web - https://seclists.org/fulldisclosure/2024/Apr/16
CVE ID: CVE-2023-27197 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-12-05T17:00:22.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow an attacker to gain root access by running a crafted binary leveraging an exported function from a shared library. The attacker must have shell access to the device in order to exploit this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wr3nchsr/PAX-Paydroid-Advisories/blob/master/advisories/2023/CVEs/CVE-2023-27197.md - https://wr3nchsr.github.io/pax-paydroid-vulnerabilities-advis
ories/blob/master/advisories/2023/CVEs/CVE-2023-27197.md - https://wr3nchsr.github.io/pax-paydroid-vulnerabilities-advisory-2023/
CVE ID: CVE-2023-27198 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-08-02T12:01:32.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: PAX A930 device with PayDroid_7.1.1_Virgo_V04.5.02_20220722 can allow the execution of arbitrary commands by using the exec service and including a specific word in the command to be executed. The attacker must have physical USB access to the device in order to exploit this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/wr3nchsr/PAX-Paydroid-Advisories/blob/master/advisories/2023/CVEs/CVE-2023-27198.md - https://wr3nchsr.github.io/pax-paydroid-vulner
-Paydroid-Advisories/blob/master/advisories/2023/CVEs/CVE-2023-27198.md - https://wr3nchsr.github.io/pax-paydroid-vulnerabilities-advisory-2023/
CVE ID: CVE-2023-27199 State: PUBLISHED Published: 2023-07-05T00:00:00 Last Updated: 2024-12-04T15:53:37.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: PAX Technology A930 PayDroid_7.1.1_Virgo_V04.5.02_20220722 allows attackers to compile a malicious shared library and use LD_PRELOAD to bypass authorization checks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/wr3nchsr/PAX-Paydroid-Advisories/blob/master/advisories/2023/CVEs/CVE-2023-27199.md - https://wr3nchsr.github.io/pax-paydroid-vulnerabilities-advisory-2023/
CVE ID: CVE-2023-27202 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-03-05T17:25:38.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html - https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20receipt.php.md
CVE ID: CVE-2023-27203 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-03-05T17:17:10.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html - https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20home.php.md
CVE ID: CVE-2023-27204 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:23:13.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html - https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20manage_user.php.md
CVE ID: CVE-2023-27205 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:22:31.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html - https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/sql%20in%20sales_report.php.md
CVE ID: CVE-2023-27206 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:20:30.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16127/best-pos-management-system-php.html - https://github.com/xiumulty/CVE/blob/main/best%20pos%20management%20system%20v1.0/xss%20in%20navbar.php.md
CVE ID: CVE-2023-27207 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:19:51.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/sql%20in%20manage_user.php%20.md
CVE ID: CVE-2023-27208 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:19:07.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20login.php.md
CVE ID: CVE-2023-27210 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:18:25.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/sql%20in%20view_order.php.md
CVE ID: CVE-2023-27211 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:17:46.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20navbar.php%20.md
CVE ID: CVE-2023-27212 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:16:55.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/online%20pizza%20ordering%20system%20v1.0/xss%20in%20signup.php.md
CVE ID: CVE-2023-27213 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:15:45.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html - https://github.com/xiumulty/CVE/blob/main/online%20student%20management%20system%20v1.0/sql%20in%20search.php.md
CVE ID: CVE-2023-27214 State: PUBLISHED Published: 2023-03-09T00:00:00.000Z Last Updated: 2025-02-28T17:15:00.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16137/online-student-management-system-php-free-download.html - https://github.com/xiumulty/CVE/blob/main/online%20student%20management%20system%20v1.0/sql%20in%20between-date-reprtsdetails.php.md
CVE ID: CVE-2023-27216 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-10T16:00:57.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://lessonsec.com/cve/cve-2023-27216/
CVE ID: CVE-2023-27217 State: PUBLISHED Published: 2023-05-18T00:00:00 Last Updated: 2025-01-22T16:39:01.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in the ChangeFriendlyName() function of Belkin Smart Outlet V2 F7c063 firmware_2.00.11420.OWRT.PVT_SNSV2 allows attackers to cause a Denial of Service (DoS) via a crafted UPNP request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/
CVE ID: CVE-2023-27224 State: PUBLISHED Published: 2023-03-22T00:00:00.000Z Last Updated: 2025-02-25T20:46:25.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/NginxProxyManager/nginx-proxy-manager - https://github.com/LinuxProgramDevelop/NginxProxyManagerCommandInjectVulnInfo/blob/main/Nginx_proxy_manager_Command_Inject_vulnerability.pdf
CVE ID: CVE-2023-27225 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T17:27:02.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in User Registration & Login and User Management System with Admin Panel v3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the first and last name field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://packetstormsecurity.com - https://medium.com/%40ridheshgohil1092/my-first-cve-2023-27225-f232650f6cde
CVE ID: CVE-2023-27229 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-18T20:17:02.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the upBw parameter at /setting/setWanIeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Am1ngl/ttt/tree/main/30
CVE ID: CVE-2023-27231 State: PUBLISHED Published: 2023-03-28T00:00:00.000Z Last Updated: 2025-02-18T20:16:12.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the downBw parameter at /setting/setWanIeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Am1ngl/ttt/tree/main/31