F5 BIG-IP Buffer Overflow Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A buffer overflow vulnerability exists in BIG-IP, which originates when a network system or product performs an operation in...

Shining a Light on SolarCity: Practical Exploitation of the X2e IoT Device (Part One)

In 2019, Mandiant’s Red Team discovered a series of vulnerabilities present within Digi International’s ConnectPort X2e device, which allows for remote code execution as a privileged user. Specifically, Mandiant’s research focused on SolarCity’s now owned by Tesla rebranded ConnectPort X2e device...

Red Hat Ansible Information Disclosure Vulnerability (CNVD-2021-19700)

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to publish, manage, and organize computer systems. Red Hat ansible has an information disclosure vulnerability that can be exploited by an attacker to steal credentials...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to trigger a service failure.

The vulnerability of the Core component of the Oracle VM VirtualBox software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unauthorized access vulnerability in Transmission web control

Transmission Web Control is the Transmission browser management interface. An unauthorized access vulnerability exists in Transmission web control, which can be exploited by an attacker to bypass authentication and arbitrarily control the download, delete, or upload functionality of an applicatio...

Denial of Service Vulnerability in MB80-CPU721E

Nanrui Automatic Control is a high-tech entity integrating software development, hardware development, technical service, equipment production and system integration. A denial of service vulnerability exists in MB80-CPU721E, which can be exploited by attackers to cause a denial of service...

Command Execution Vulnerability in the InRouter900 Industrial Router from Johntons

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Command Execution Vulnerability in the InRouter900 Industrial Router from Johnstone (CNVD-2021-10445)

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Unspecified Vulnerability in Oracle Configurator

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

Command Execution Vulnerability in the InRouter900 Industrial Router from Johnstone (CNVD-2021-10454)

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Google Chrome iframe sandbox improperly implemented vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improperly implemented iframe sandbox vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass navigation restrictio...

Arbitrary File Deletion Vulnerability in the InRouter900 Industrial Router from Imagicom (CNVD-2021-10444)

The Johnton-InRouter900 series industrial router is a 4G industrial router. The InRouter900 Industrial Router suffers from an arbitrary file deletion vulnerability, which originates from the program failing to properly validate user data, and can be exploited by a remote attacker to delete...

Heap out-of-bounds read vulnerability in jhead pr***_DQ*** function

jhead is a program for processing settings and thumbnails in Exif jpeg headers. A heap out-of-bounds read vulnerability exists in the jhead prDQ function. An attacker could exploit this vulnerability to cause the program to crash...

XSS Vulnerability in WordPress PowerPress Plugin

WordPress is the WordPress Wordpress Foundation's set of blogging platform developed using the PHP language.PowerPress is the WordPress plugin. An XSS vulnerability exists in the WordPress PowerPress plugin. An attacker can exploit the vulnerability to obtain an administrator cookie...

TP-Link TL-R470GP-AC in Denial of Service Vulnerability

The TP-Link TL-R470GP-AC is a router. The TP-Link TL-R470GP-AC is vulnerable to a denial of service vulnerability. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully constructed packet to a specif...

SQL Injection Vulnerability in TuziCMS Backend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. A SQL injection vulnerability exists in the TuziCMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Desktop Calendar for PC suffers from dll hijacking vulnerability

Desktop Calendar is a calendar that is placed on your desktop. Desktop Calendar for PC suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Information leakage vulnerability in the full version of Feifei Movie & TV navigation system

The full version of Fei Fei Movie Navigation System is a free and open source PHP movie program. The full version of Feifei Movie Navigation System suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Denial of Service Vulnerability in Tenda AC9, AC15

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...