Command Execution Vulnerability in the InRouter900 Industrial Router from Johntons

The Johnton-InRouter900 series industrial router is a 4G industrial router. A command execution vulnerability exists in the InRouter900 Industrial Router. The vulnerability stems from the program's failure to properly validate user data and can be exploited by a remote attacker to execute arbitra...

Unspecified Vulnerability in Oracle Configurator

Oracle Configurator is a sales and configuration product that provides the next generation of the latest configuration technology. An unspecified vulnerability exists in the UI Servlet component in Oracle Configurator 12.1, 12.2. An attacker could exploit this vulnerability to compromise...

Google Chrome iframe sandbox improperly implemented vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An improperly implemented iframe sandbox vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass navigation restrictio...

XSS Vulnerability in WordPress PowerPress Plugin

WordPress is the WordPress Wordpress Foundation's set of blogging platform developed using the PHP language.PowerPress is the WordPress plugin. An XSS vulnerability exists in the WordPress PowerPress plugin. An attacker can exploit the vulnerability to obtain an administrator cookie...

TP-Link TL-R470GP-AC in Denial of Service Vulnerability

The TP-Link TL-R470GP-AC is a router. The TP-Link TL-R470GP-AC is vulnerable to a denial of service vulnerability. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully constructed packet to a specif...

Heap out-of-bounds read vulnerability in jhead pr***_DQ*** function

jhead is a program for processing settings and thumbnails in Exif jpeg headers. A heap out-of-bounds read vulnerability exists in the jhead prDQ function. An attacker could exploit this vulnerability to cause the program to crash...

SQL Injection Vulnerability in TuziCMS Backend

TuziCMS TC for short is an enterprise web content management system based on PHP+MySql. A SQL injection vulnerability exists in the TuziCMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

The vulnerability of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Desktop Calendar for PC suffers from dll hijacking vulnerability

Desktop Calendar is a calendar that is placed on your desktop. Desktop Calendar for PC suffers from a dll hijacking vulnerability. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Information leakage vulnerability in the full version of Feifei Movie & TV navigation system

The full version of Fei Fei Movie Navigation System is a free and open source PHP movie program. The full version of Feifei Movie Navigation System suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Denial of Service Vulnerability in Tenda AC9, AC15

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...

Mikrotik RouterOS v6.48 suffers from a denial of service vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A denial of service vulnerability exists in Mikrotik RouterOS v6.48, which can be exploited by an attacker to caus...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03437)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Xunlei 11 suffers from a local power lifting vulnerability

Thunderbolt 11 is a computer downloader software. Xunlei 11 suffers from a local elevation vulnerability. An attacker can exploit the vulnerability to elevate a user with low privileges to system privileges...

Information leakage vulnerability in Doogee Mobile for Android Extreme Edition

The business scope of Wuhan Douyu Network Technology Co., Ltd. includes: technology development, technology transfer, technology consulting and technical services in the field of computer and network technology. An information leakage vulnerability exists in the Android Extreme version of Douyu's...

Webswing Remote Code Execution Vulnerability

Webswing is a web server that lets you run any swing application in a web browser using only pure HTML5. A remote code execution vulnerability exists in JsLink in Webswing that can be exploited by an attacker to execute code in the server...

Command Execution Vulnerability in Curtain Client

Curtain Client is a mind mapping software. A command execution vulnerability exists in the Curtain Client, which can be exploited by an attacker to inject an executable DLL file into the client process to perform arbitrary functions...

Binary Vulnerability in Nidesoft 3GP Video Converter

Nidesoft 3GP Video Converter supports all cell phone video formats. 3GP Converter converts so as to support a full range of video formats. Including MPEG1/2/4, WMV, MP4, MOV, H.264/MPEG-4 AVC to 3GP, MPEG-4 video. A binary vulnerability exists in Nidesoft 3GP Video Converter. An attacker can...

Unauthorized Access Vulnerability in EDAS Hands-On Dedicated System

Aliyun, an Alibaba Group company, is a leading global cloud computing and artificial intelligence technology company. An unauthorized access vulnerability exists in the EDAS hands-on dedicated system, which can be exploited by an attacker to gain unauthorized access to sensitive information...

Binary Vulnerability in Rexchip Chip (CNVD-2020-75212)

With a R&D team specializing in system-on-chip design and algorithm research, Rexchip Microelectronics Corporation provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control and other fields. A binary...