Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24184 State: PUBLISHED Published: 2023-02-21T00:00:00.000Z Last Updated: 2025-03-14T18:31:34.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/fuxianghah/IOT/tree/main/Motorala/MR2600/13
CVE ID: CVE-2023-24187 State: PUBLISHED Published: 2023-02-14T00:00:00.000Z Last Updated: 2025-03-20T19:15:21.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) vulnerability in ureport v2.2.9 allows attackers to execute arbitrary code via uploading a crafted XML file to /ureport/designer/saveReportFile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ureport.com - https://github.com/youseries/ureport - https://github.com/cgddgc/vulns/blob/main/ureport2-vuln-des.md - https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24187.md
CVE ID: CVE-2023-24188 State: PUBLISHED Published: 2023-02-13T00:00:00.000Z Last Updated: 2025-03-21T18:07:35.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://ureport.com - https://github.com/youseries/ureport - https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24188.md
CVE ID: CVE-2023-24189 State: PUBLISHED Published: 2023-02-24T00:00:00.000Z Last Updated: 2025-03-12T14:27:27.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: An XML External Entity (XXE) vulnerability in urule v2.1.7 allows attackers to execute arbitrary code via uploading a crafted XML file to /urule/common/saveFile. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/youseries/urule - https://github.com/Venus-WQLab/bug_report/blob/main/ureport/ureport-cve-2023-24189.md
CVE ID: CVE-2023-24191 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:36:41.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20signup.php.md
CVE ID: CVE-2023-24192 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:55:53.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20login.php.md
CVE ID: CVE-2023-24194 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:52:56.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20navbar.php.md
CVE ID: CVE-2023-24195 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:52:19.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/xss%20in%20index.php.md
CVE ID: CVE-2023-24197 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T18:51:34.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/16022/online-food-ordering-system-v2-using-php8-and-mysql-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Online%20Food%20Ordering%20System%20v2/sql%20in%20view_order.php.md
CVE ID: CVE-2023-24198 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T13:56:06.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20save_winner.md
CVE ID: CVE-2023-24199 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T13:54:59.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20delete_ticket.php.md
CVE ID: CVE-2023-24200 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T13:52:46.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20save_ticket.php.md
CVE ID: CVE-2023-24201 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T13:50:50.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/sql%20in%20get_ticket.php.md
CVE ID: CVE-2023-24202 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-26T13:48:45.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/php/15951/raffle-draw-system-using-php-and-javascript-free-source-code.html - https://github.com/xiumulty/CVE/blob/main/Raffle%20draw%20system%20v1.0/lfi%20in%20index.php.md
CVE ID: CVE-2023-24203 State: PUBLISHED Published: 2024-05-14T16:18:38.122Z Last Updated: 2025-02-13T15:46:37.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitary code via the company or query parameter(s). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com - https://momonguyen.com/2023/cve-2023-24203/ - https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-24204
CVE ID: CVE-2023-24204 State: PUBLISHED Published: 2024-05-14T16:22:07.598Z Last Updated: 2025-02-13T15:46:38.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SourceCodester Simple Customer Relationship Management System v1.0 allows attacker to execute arbitrary code via the name parameter in get-quote.php. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.sourcecodester.com - https://momonguyen.com/2023/cve-2023-24203/ - https://github.com/momo1239/CVE-2023-24203-and-CVE-2023-24204
CVE ID: CVE-2023-24205 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T16:21:32.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clash for Windows v0.20.12 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via overwriting the configuration file (cfw-setting.yaml). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Fndroid/clash_for_windows_pkg - https://github.com/Fndroid/clash_for_windows_pkg/issues/3891
CVE ID: CVE-2023-24206 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T13:46:51.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Davinci v0.3.0-rc was discovered to contain a SQL injection vulnerability via the copyDisplay function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/edp963/davinci/issues/2320
CVE ID: CVE-2023-24212 State: PUBLISHED Published: 2023-02-23T00:00:00.000Z Last Updated: 2025-03-12T14:28:29.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/w0x68y/cve-lists/blob/main/Tenda/vuln/readme.md - https://github.com/Venus-WQLab/bug_report/blob/main/Tenda/CVE-2023-24212.md
CVE ID: CVE-2023-24217 State: PUBLISHED Published: 2023-03-06T00:00:00.000Z Last Updated: 2025-03-06T21:12:16.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://labcollector.com/labcollector-lims/add-ons/eln-electronic-lab-notebook/ - http://packetstormsecurity.com/files/171252/Agilebio-Lab-Collector-4.234-Remote-Code-Execution.html
CVE ID: CVE-2023-24219 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:46:20.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seagull1985/LuckyFrameWeb/issues/24
CVE ID: CVE-2023-24220 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:32:41.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleMapper.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seagull1985/LuckyFrameWeb/issues/22
CVE ID: CVE-2023-24221 State: PUBLISHED Published: 2023-02-17T00:00:00.000Z Last Updated: 2025-03-18T16:28:10.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptMapper.xml. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/seagull1985/LuckyFrameWeb/issues/23
CVE ID: CVE-2023-24229 State: PUBLISHED Published: 2023-03-15T00:00:00 Last Updated: 2024-08-02T10:49:09.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mainfunction.cgi 'parameter' parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.draytek.com/ - https://github.com/sadwwcxz/Vul - https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul - https://www.
ps://github.com/sadwwcxz/Vul - https://web.archive.org/web/20230315181013/https://github.com/sadwwcxz/Vul - https://www.draytek.co.uk/support/guides/kb-remotemanagement - https://www.draytek.com/support/knowledge-base/5465 - https://www.draytek.com/about/newsroom/2021/2021/end-of-life-notification-vigor2960
CVE ID: CVE-2023-24230 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:02:50.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component /formwork/panel/dashboard of Formwork v1.12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page title parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://medium.com/%400x2bit/formwork-1-12-1-stored-xss-vulnerability-at-page-title-b6efba27891a - https://github.com/getformwork/formwork/releases/tag/1.12.1
CVE ID: CVE-2023-24231 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T18:00:56.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/categories.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Categories Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stemword/php-inventory-management-system - https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b29636506
management-system - https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b
CVE ID: CVE-2023-24232 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T17:59:16.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/product.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stemword/php-inventory-management-system - https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b
CVE ID: CVE-2023-24233 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T17:57:45.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component /php-inventory-management-system/orders.php?o=add of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Client Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stemword/php-inventory-management-system - https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b
CVE ID: CVE-2023-24234 State: PUBLISHED Published: 2023-02-10T00:00:00.000Z Last Updated: 2025-03-24T17:55:25.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the component php-inventory-management-system/brand.php of Inventory Management System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Brand Name parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/stemword/php-inventory-management-system - https://medium.com/%400x2bit/inventory-management-system-multiple-stored-xss-vulnerability-b296365065b
CVE ID: CVE-2023-24236 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T19:19:25.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Am1ngl/ttt/tree/main/19
CVE ID: CVE-2023-24238 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-18T19:17:06.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Am1ngl/ttt/tree/main/20
CVE ID: CVE-2023-24241 State: PUBLISHED Published: 2023-01-31T00:00:00.000Z Last Updated: 2025-03-27T14:40:25.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/loginpost.php. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Mortalwangxin/lives/issues/1
CVE ID: CVE-2023-24243 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-12T16:12:44.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://arc.cdata.com/ - https://arc.cdata.com/trial/ - https://www.cdata.com/kb/entries/netembeddedserver-notice.rst - https://gist.github.com/d3vc0r3/6460a5f006e32a2ebffe739e411ab1b8
CVE ID: CVE-2023-24249 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T13:45:26.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://laravel-admin.org/ - https://github.com/z-song/laravel-admin - https://flyd.uk/post/cve-2023-24249/
CVE ID: CVE-2023-24251 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T13:43:23.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: WangEditor v5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /dist/index.js. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Cutegod/CMS_0_day/issues/2
CVE ID: CVE-2023-24253 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T13:42:21.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Domotica Labs srl Ikon Server before v2.8.6 was discovered to contain a SQL injection vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.swascan.com/it/security-advisory-domotica-labs-ikon-server/
CVE ID: CVE-2023-24256 State: PUBLISHED Published: 2023-07-06T00:00:00 Last Updated: 2024-11-19T19:18:15.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/hhj4ck/JailBreakEC6/blob/main/BugReport.md
CVE ID: CVE-2023-24258 State: PUBLISHED Published: 2023-02-27T00:00:00.000Z Last Updated: 2025-03-11T03:00:35.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Abyss-W4tcher/ab4yss-wr4iteups/blob/ffa980faa9e3598d49d6fb7def4f7a67cfb5f427/SPIP%20-%20Pentest/SPIP%204.1.5/SPIP_4.1.5_AND_BEFORE_AUTH_SQLi_Abyss_Watcher.md - https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4
04.1.5/SPIP_4.1.5_AND_BEFORE_AUTH_SQLi_Abyss_Watcher.md - https://blog.spip.net/Mise-a-jour-de-securite-sortie-de-SPIP-4-1-7-SPIP-4-0-9-et-SPIP-3-2-17.html - https://www.debian.org/security/2023/dsa-5325
CVE ID: CVE-2023-24261 State: PUBLISHED Published: 2023-06-21T00:00:00 Last Updated: 2024-12-06T19:15:28.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST request. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://justinapplegate.me/2023/glinet-CVE-2023-24261/
CVE ID: CVE-2023-24269 State: PUBLISHED Published: 2023-04-28T00:00:00.000Z Last Updated: 2025-01-30T20:27:10.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a crafted Zip file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/s4n-h4xor/CVE-Publications/blob/main/CVE-2023-24269/CVE-2023-24269.md
CVE ID: CVE-2023-24276 State: PUBLISHED Published: 2023-02-06T00:00:00.000Z Last Updated: 2025-03-25T18:29:01.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Am1ngl/ttt/tree/main/18
CVE ID: CVE-2023-24278 State: PUBLISHED Published: 2023-03-18T00:00:00.000Z Last Updated: 2025-02-26T19:04:07.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.openwall.com/lists/oss-security/2023/03/16/1 - https://census-labs.com/news/2023/03/16/reflected-xss-vulnerabilities-in-squidex-squidsvg-endpoint/