IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…

Reflected XSS on demo.microweber.org/demo/module/ in GitHub repository microweber/microweber prior to 1.2.15. Execute Arbitrary JavaScript as the attacked user. It’s the only payload I found working,…

There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules,…

An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker. Zafiyet ile ilgili Genel Bilgi,…

All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user. Zafiyet ile ilgili Genel Bilgi, Etki…

A vulnerability in all versions of SCT/SCT Pro prior to version 14.2.2 allows a remote unauthenticated attacker to identify and forge requests to internal systems…

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically,…

SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data Zafiyet ile ilgili Genel Bilgi, Etki…

Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary…

Dell EMC iDRAC8 versions 2.81.81 and earlier contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource…