All CVEs — page 322 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
GouGuOA v6.0.5 and earlier versions are vulnerable to SQL Injection through the keywords parameter in the /home/message/rubbish endpoint, allowing attackers to execute arbitrary SQL commands and potentially gain full control over the database.
The flaw allows remote code execution through the project task export interface, enabling attackers to inject arbitrary PHP code.
A critical vulnerability in dormakaba evolo Service allows remote attackers to execute arbitrary code as SYSTEM through a .NET component, posing a severe risk to system integrity.
The flaw allows unauthenticated attackers to bypass payment requirements by providing any valid wallet address that meets on-chain conditions, enabling free access to paid content without proving wallet ownership. This creates a significant authorization bypass where attackers can reuse cached grants indefinitely.