Skip to main content
CVE-2023-6903 Dec 17, 23:15 CRITICAL POC Act Now

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Application Security Gateway Netentsec
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.7%
CVE-2023-6902 Dec 17, 16:15 CRITICAL POC Act Now

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP File Upload Stupid Simple Cms Codelyfe
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-6901 Dec 17, 14:15 CRITICAL POC Act Now

A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Command Injection Stupid Simple Cms Codelyfe
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
2.9%
CVE-2023-6899 Dec 17, 13:15 CRITICAL POC Act Now

A vulnerability classified as problematic was found in rmountjoy92 DashMachine 0.5-4. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Code Injection Dashmachine
NVD VulDB
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-6898 Dec 17, 11:15 CRITICAL POC Act Now

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Best Courier Management System Mayurik
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.6%
CVE-2023-6895 Dec 17, 08:15 CRITICAL POC THREAT Act Now

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Command Injection Hikvision Intercom Broadcast System
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
89.1%
CVE-2023-50965 Dec 17, 02:15 CRITICAL POC Act Now

In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and potentially remote code execution via a long URI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Buffer Overflow Memory Corruption Micro Http Server
NVD GitHub
CVSS 3.1
9.8
EPSS
1.5%
CVE-2023-6888 Dec 17, 01:15 CRITICAL POC Act Now

A vulnerability classified as critical was found in PHZ76 RtspServer 1.0.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Stack Overflow Rtspserver
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-6887 Dec 17, 01:15 CRITICAL POC Act Now

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

File Upload Forestblog Forestblog Project
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2023-6900 Dec 17, 14:15 CRITICAL POC Act Now

A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Dashmachine
NVD VulDB
CVSS 3.1
9.1
EPSS
1.1%
CVE-2023-6886 Dec 17, 01:15 CRITICAL Act Now

A vulnerability was found in xnx3 wangmarket 6.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Code Injection Wangmarket Wang Market
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy