CatfishCMS Backend File Arbitrary Deletion Vulnerability

CatfishCMS is open source and free PHP CMS web content management system. An arbitrary file deletion vulnerability exists in the CatfishCMS backend. An attacker can exploit the vulnerability to delete arbitrary files...

Razer: Leftover back-end system on www.zest.co.th allows an unauthorized attacker to generate Razer Gold Pin for free

The tester discovered a residual backend system was left exposed. The system was removed from public access. Razer thanks the tester for his diligence...

Huawei EulerOS: Security Advisory for gvfs (EulerOS-SA-2019-1968)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in iCMS Backend

iCMS is an efficient and simple content management system built with PHP and MySQL. An SQL injection vulnerability exists in the iCMS backend, which can be exploited by attackers to obtain sensitive database information...

CVE-2018-1002104

Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...

CVE-2018-1002104

CVE-2018-1002104 affects Kubernetes ingress default backend versions = 1.5) is implied but not confirmed in these sources.

CVE-2018-1002104

Versions 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly...

Command injection

In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this can lead to internal portal access name conflict...

Nord Security: Password Reset Link Works Multiple Times

Background: Normally, a secure way to handle password reset links is to invalidate the link/token upon usage. Additionally, if multiple reset links are requested, older & unused tokens should also be invalidated i.e., if 2 reset tokens were requested, the 2nd token should be invalid upon your usa...

File upload vulnerability in MyuCMS backend Co***.php page

MyuCMS open source content management system developed using ThinkPHP community mall. A file upload vulnerability exists in the Co.php page of MyuCMS backend. Attackers can exploit the vulnerability to upload webshell and gain server privileges...

SQL Injection Vulnerability in iCMS Backend da***.ad***.php File

iCMS is a content management system built with PHP and MySQL. A SQL injection vulnerability exists in the iCMS backend da.ad.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Cloud CMS Backend us***.php File

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the us.php file in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL injection vulnerability in yu***.php file of Yunye CMS backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background yu.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in the co***.php file of Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background co.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in de***.php file of Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the de.php file in the background of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface SQL injection vulnerability, attackers can use this vulnerability to obtain sensitive database information...

Logic Flaw Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface has a logic flaw vulnerability that can be exploited by an attacker to violently break the administrator's password...

openSUSE: Security Advisory for qemu (openSUSE-SU-2019:2510-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-11712

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...

Command Execution Vulnerability in the Background of Wild Rain Novel CMS

Wild Rain Novel cms is a lightweight novel website solution based on ThinkPHP 5.1+MySQL technology. Rainy Novel cms backend has a command execution vulnerability, attackers can use the vulnerability to execute malicious code...