CVE-2021-32612

The VeryFitPro com.veryfit2hr.second application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing...

Default credentials

The VeryFitPro com.veryfit2hr.second application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...

Weak password vulnerability in Hikvision security access gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. A weak password vulnerability exists in the Hikvision security access gateway. An attacker can utilize the vulnerability to log into the backend and obtain sensitive information...

VeryFitPro 加密问题漏洞

VeryFitPro is a powerful health management software from China's Shenzhen Aidu Technology Co., Ltd. that needs to be used with the same brand of smart bracelet, using the app users can view the number of steps taken, calories burned, sleep quality and other information in real time. There is an...

Weak Password Vulnerability in DCN DCME Multicore Engine

Digital China Group Corporation focuses on providing you with full-stack cloud services, including cloud management services such as cloud management, cloud resource procurement, and proprietary cloud services, as well as data services such as data desensitization and video cloud for various...

Weak Password Vulnerability in StarNet Intelligence SVG6000 Series Voice Gateway

As the core business unit for intelligent communications under StarNet Ruijie, StarNet Intelligence is a leading provider of converged communications solutions in China. A weak password vulnerability exists in the SVG6000 series voice gateway of Starnet Intelligence. An attacker can use the weak...

Weak Password Vulnerability in EG2000P of Ruijie Networks Co.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the EG2000P of Ruijie Networks Co. An attacker can exploit this vulnerability to log into the device backend and obtain sensitive information...

Command Execution Vulnerability in CMS Backend

Knowledge CMS is an open source website builder. Know CMS backend command execution vulnerability, an attacker can exploit the vulnerability to execute arbitrary commands...

TamronOS IPTV V5 System Backend Contains Arbitrary File Download Vulnerability

TamronOS IPTV system is a live and on-demand system solution for broadband operators, hotels, schools and other high traffic scenarios. TamronOS IPTV V5 system has an arbitrary file download vulnerability in the background, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in D-Link DIR-600M

The D-Link DIR-600M is a wireless router. A weak password vulnerability exists in D-Link DIR-600M. An attacker can exploit this vulnerability to log into the backend and obtain sensitive information...

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...

CVE-2021-27630

SAP NetWeaver ABAP Server and ABAP Platform Enqueue Server, versions - KRNL32NUC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73, allows an unauthenticated attacker without specific knowledge of the system to send a...

GHSA-RCP4-JM2V-MR3F Cross-site scripting in Shopizer

A stored cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customername in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when informati...

Cross-site scripting in Shopizer

A stored cross-site scripting XSS vulnerability in Shopizer before 2.17.0 allows remote attackers to inject arbitrary web script or HTML via customername in various forms of store administration. It is saved in the database. The code is executed for any user of store administration when informati...

SQL Injection in t3/dce

The dce aka Dynamic Content Element extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account...

GHSA-5V5H-4W2G-GXXC SQL Injection in t3/dce

The dce aka Dynamic Content Element extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account...

GHSA-XPXM-PF7G-2534 Cross-site scripting in media2click

The media2click aka 2 Clicks for External Media extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account...

Cross-site scripting in media2click

The media2click aka 2 Clicks for External Media extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account...

USN-4982-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel contained a reference counting error. A local attacker could use this to cause a denial of service system crash. CVE-2020-25670 Kiyin 尹亮 discovered that the NFC LLCP protocol implementation in the Linux kernel did n...