Tag
high
advisory
Improper Access Control in light0011 CMS
1 TTP 1 CVEThe light0011 CMS contains an improper access control vulnerability in its Captcha Validation component that allows remote attackers to manipulate authentication mechanisms.
cms
web-application-vulnerability
access-control
remote-exploit
1t
1c
high
advisory
SQL Injection in itsourcecode Leave Management System
1 rule 1 TTP 1 CVEThe itsourcecode Leave Management System version 1.0 is vulnerable to remote SQL injection via the user_email parameter in login.php, enabling potential authentication bypass or unauthorized database access.
Leave Management System
web-vulnerability
sqli
remote-exploit
1r
1t
1c
critical
advisory
Remote Code Execution in LightLLM Config Server via Insecure Deserialization
5 TTPs 1 CVELightLLM versions 1.2.0 and earlier are vulnerable to unauthenticated remote code execution via the Config Server's /visual_register WebSocket endpoint due to insecure pickle deserialization.
LightLLM
vulnerability
rce
deserialization
python
denial-of-service
remote-exploit
5t
1c
updated