PT-2021-18675

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlink proc enable parameter in the "api/ZRAndlink/set ZRAndlink" interface...

China Mobile An Lianbao WF-1 命令注入漏洞

China Mobile An Lianbao WF-1 router is a router from China Mobile China. A security vulnerability exists in China Mobile An Lianbao WF-1 1.01, which originates from a POST request to api ZRQos to set up an online client via the "ip" parameter...

CVE-2021-30229: Improper Neutralization of Special Elements used in an OS Command

The api/zrDm/setzrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dmenable, AppKey, or Pwd parameter...

CVE-2021-30230: Improper Neutralization of Special Elements used in an OS Command

The api/ZRFirmware/settimezone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the zonename parameter...

PT-2021-18676

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 router version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands. This is achieved by injecting shell metacharacters into specific parameters in the "api/zrDm/set zrDm" interface. Th...

PT-2021-16802

Name of the Vulnerable Software and Affected Versions China Mobile An Lianbao WF-1 version 1.01 Description A command injection issue exists, allowing for potential exploitation via the ip parameter in a POST request to the "/api/ZRQos/set online client" API endpoint. Recommendations For version...

PT-2021-17365

Name of the Vulnerable Software and Affected Versions: Foxit PhantomPDF version 10.1.0.37527 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file. Th...

PT-2021-11516

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0.1 Teamcenter Visualization versions prior to 13.1.0.1 Description: A vulnerability has been identified in the affected applications, where they lack proper validation of user-supplied data when parsing RAS files...

Mitsubishi Electric MELFA (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELFA FR Series, MELFA CR Series, MELFA ASSISTA Vulnerability: Uncontrolled Resource Consumption 2. UPDATE INFORMATION This updated advisory is a follow-up to the original...

Command Execution Vulnerability in Hua An Securities Hui Win pc Software

Hua An Securities Hui Win pc version is a stock financial terminal newly launched by Hua An Securities. Huaan Securities Hui Win pc software has a command execution vulnerability, which can be exploited by attackers to inject executable DLL files into client processes and execute arbitrary...

Command Execution Vulnerability in Huaan Securities Online Trading Software

hereinafter referred to as "Hua An Securities" was approved by the China Securities Regulatory Commission on December 28, 2000 was incorporated as a securities company, formerly known as the May 1991 establishment of the Anhui Provincial Securities Company, with a registered capital of 2.821...

council82.org Cross Site Scripting vulnerability OBB-1456052

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-9990

A race condition was addressed with additional validation. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with kernel privileges...

an-der-sonne.at Cross Site Scripting vulnerability OBB-1246488

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL Injection Vulnerability in CMSWing of Xi'an Huashang Software Technology Co.

CMSWING is a ThinkJS-based e-commerce platform and CMS builder. Xi'an Huashang Software Technology Co., Ltd CMSWing suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2020-13929

Name of the Vulnerable Software and Affected Versions WebFOCUS Business Intelligence version 8.0 SP6 Description The issue allows for a Cross-Site Request Forgery CSRF attack against administrative users. This can be exploited through the "/ibi apps/WFServlet.ibfs" endpoint, potentially leading t...

CVE-2020-10977

GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects...

Moderate: Red Hat Security Advisory: Red Hat Process Automation Manager 7.7.0 Security Update

An update is now available for Red Hat Process Automation Manager. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

PT-2020-20349

Name of the Vulnerable Software and Affected Versions Foxit Studio Photo version 3.6.6.916 Description This issue allows remote attackers to disclose sensitive information on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious fil...

Odd security letter issued to Microsoft a high-risk vulnerability warning Win10 as the main effect of the target-vulnerability warning-the black bar safety net

Recently, Qi'an letter of Threat Intelligence Center released Microsoft WindowsSMBv3 service remote code execution vulnerability announcements. Notice that 3 on 11 May, the foreign company released a recent Microsoft security patch design vulnerability summary, which includes a threat level is...