CVE-2020-36655
Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into…
Yii Yii2 Gii before 2.2.2 allows remote attackers to execute arbitrary code via the Generator.php messageCategory field. The attacker can embed arbitrary PHP code into…
When a file is processed, an infinite loop occurs in next_inline() of the more_curly() function. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını…
Cybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, which could allow a…
When processing files, malloc stores the data of the current line. When processing comments, malloc incorrectly accesses the released memory (use after free). Zafiyet ile…
An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için…
A program using FoundationNetworking in swift-corelibs-foundation is potentially vulnerable to CRLF ( ) injection in URLRequest headers. In this vulnerability, a client can insert one…
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie “ENV_LIST_URL”. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını…
EyouCMS <= 1.6.0 was discovered a reflected-XSS in the article publish component in cookie “ENV_GOBACK_URL”. Zafiyet ile ilgili Genel Bilgi, Etki ve Çözümleri için Devamını…
EyouCMS <= 1.6.0 was discovered a reflected-XSS in FileManager component in GET value “activepath” when creating a new file. Zafiyet ile ilgili Genel Bilgi, Etki…
EyouCMS <= 1.6.0 was discovered a reflected-XSS in article type editor component in POST value “name” if the value contains a malformed UTF-8 char. Zafiyet…