10831 matches found
SQL Injection Vulnerability in SDCMS Backend
SDCMS is a B2C mall website management system independently developed by Vivid Network, PHP four-in-one website management system. There are SQL injection vulnerabilities in the backend of SDCMS. Attackers can use the vulnerability to obtain sensitive information...
Bypass of fix for CVE-2020-26231, Twig sandbox escape
Impact A bypass of CVE-2020-26231 fixed in 1.0.470/471 and 1.1.1 was discovered that has the same impact as CVE-2020-26231 & CVE-2020-15247: An authenticated backend user with the cms.managepages, cms.managelayouts, or cms.managepartials permissions who would normally not be permitted to provide...
Weak Password Vulnerability in Riptide Networks NBR2100G-E
Ruijie Networks is an ICT infrastructure and industry solutions provider, with its main business being the research, development, design and sales of network equipment, network security products and cloud desktop solutions. A weak password vulnerability exists in Ruijie Networks NBR2100G-E. An...
TYPO3 6.2.1 SQL Injection Exploit
Exploit Title: TYPO3 6.2.1 allows SQL Injection via a backend user on backend.php Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Vendor: https://typo3.org/ Link: https://get.typo3.org/version/6.2.1 CVE: CVE-2021-31777 Proof: https://streamable.com/8v7v4i + Exploit Source:...
Weak Password Vulnerability in Belkin's EA6500
The EA6500 is a router product from Belkin. A weak password vulnerability exists in the Belkin EA6500, which can be exploited by an attacker to log into the system backend and perform unauthorized operations...
Paragon - Red Team Engagement Platform With The Goal Of Unifying Offensive Tools Behind A Simple UI
Paragon is a Red Team engagement platform. It aims to unify offensive tools behind a simple UI, abstracting much of the backend work to enable operators to focus on writing implants and spend less time worrying about databases and css. The repository also provides some offensive tools already...
GHSA-HHX9-P69V-CX2J Authentication bypass in Apache Airflow
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and is documented at...
curl: CVE-2021-22901: TLS session caching disaster
Summary: lib/vtls/openssl.c osslconnectstep1 sets up the osslnewsessioncb sessionid callback with SSLCTXsesssetnewcb, and adds association from dataidx and connectdataidx to current conn and data respectively: SSLCTXsetsessioncachemodebackend-ctx, SSLSESSCACHECLIENT | SSLSESSCACHENOINTERNAL;...
OPENSUSE-SU-2021:0628-1 Security update for nim
This update for nim fixes the following issues: num was updated to version 1.2.12: Fixed GC crash resulting from inlining of the memory allocation procs Fixed “incorrect raises effect for $NimNode” 17454 From version 1.2.10: Fixed “JS backend doesn’t handle float-int type conversion “ 8404 Fixed...
File upload vulnerability in ClassCMS backend (CNVD-2021-35844)
ClassCMS is a content management system. A file upload vulnerability exists in the ClassCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
SQL Injection Vulnerability in Novel House-plus Backend
Novel boutique-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system , built on SpringCloud , using MyBatis as the persistence layer . A SQL injection vulnerability exists in the backend of Novel Boutique-plus. An attacker can exploit the vulnerability to obtai...
File upload vulnerability in PHPOK backend
PHPOK is a set of enterprise website system developed in PHP + MYSQL language. A file upload vulnerability exists in the PHPOK backend. An attacker can exploit the vulnerability to upload webshell and gain server privileges...
Citrix Endpoint Management AutoDiscovery Service Migration FAQ
What Changed? On April 15th Citrix Legacy AutoDiscovery Service Records were migrated ads.xm.cloud.com to discovery.cem.cloud.us What will we see on first Logon? 1. Citrix Active Discovery Service ADSUI→ shows no domain claimed After login will see no domains in ADS UI when they first logon. No...
CVE-2021-31777
The dce aka Dynamic Content Element extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account...
CVE-2021-31778
The media2click aka 2 Clicks for External Media extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account...
CVE-2021-31779
The yoastseo aka Yoast SEO extension before 7.2.1 for TYPO3 allows SSRF via a backend user account...
CVE-2021-31777
The dce aka Dynamic Content Element extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account...
Cross site scripting
The media2click aka 2 Clicks for External Media extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account...
CVE-2021-31778
The CVE-2021-31778 entry concerns the TYPO3 extension media2click (aka 2 Clicks for External Media) 1.x prior to 1.3.3. The vulnerability enables cross-site scripting (XSS) by a backend user account due to insufficient input handling in the extension. Affected component: media2click for TYPO3; ro...
