Apache Httpd < 2.4.42 : mod_proxy_ftp use of uninitialized value

in Apache HTTP Server versions 2.4.0 to 2.4.41, modproxyftp use of uninitialized value with malicious FTP backend...

SQL Injection Vulnerability in CRMEB Mall System Backend Sy***.php Page

CRMEB mall system is a new retail mobile e-commerce system developed based on ThinkPhp6.0+Vue. CRMEB mall system background Sy.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

CVE-2014-8182

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses...

Code injection

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses...

CVE-2014-8182

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses...

CVE-2014-8182

CVE-2014-8182 concerns OpenLDAP 2.4 slapd when processing DNS SRV messages. An off-by-one error can cause a crash if the dnssrv backend is used, allowing a remote attacker to crash the service with crafted DNS responses. The available connected sources confirm the affected software (OpenLDAP 2.4/...

OX App Suite 7.10.2 Cross Site Scripting / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 67097 Bug ID Vulnerability type: Cross-site scripting CWE-80 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev14,...

File Upload Vulnerability in WellCMS v2.0 Backend

WellCMS is an open source, mobile-oriented lightweight CMS. A file upload vulnerability exists in the WellCMS v2.0 backend, which can be exploited by attackers to gain server privileges...

Code Execution Vulnerability in XYHCMS Backend

XYHCMS is an open source CMS content management system. There is a code execution vulnerability in the background of XYHCMS, which can be exploited by an attacker to add malicious code in site.php, so that the attacker can gain access to the target terminal...

NewStart CGSL CORE 5.05 / MAIN 5.05 : gvfs Vulnerability (NS-SA-2019-0238)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gvfs packages installed that are affected by a vulnerability: - An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users...

SQL Injection Vulnerability in Ocean CMS Backend ad***_vi***.php File

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. There is a SQL injection vulnerability in the advi.php file in the background of Ocean CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2019-16789 HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers

In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests containing special...

File Inclusion Vulnerability in HulaCWMS Backend

HulaCWMS Hula Enterprise Website Management System is based on ThinkPHP5 framework development, including all the features of ThinkPHP5. A file inclusion vulnerability exists in the backend of HulaCWMS. An attacker can exploit the vulnerability to gain server privileges...

zzzphp v1.7.5 Command Execution Vulnerability in Backend

zzphp is a content management system CMS. A command execution vulnerability exists in the backend of zzzphp v1.7.5, which can be exploited by attackers to execute malicious code...

Vulnerabilities in the Backend Management System of Shanghai Likang Network Technology Co.

Ltd. adhering to the website construction as the basis, network marketing for the purpose of combining website optimization, content, creative multi-dimensional, to provide you with website construction, website optimization, site optimization services. Ltd. website backend management system ther...

PHPOK system 5.4 file upload vulnerability in the background of Shenzhen Kunshuo Technology Co.

PHPOK system hereinafter referred to as OK system is a content management system for website construction developed by Shenzhen Kunshuo Technology Co., Ltd formerly known as PHPOK Studio, written in PHP, using MySQL database storage by default, and based on the LGPL open-source agreement licensed...

HTTP Request Smuggling: LF vs CRLF handling in Waitress

Impact Waitress implemented a "MAY" part of the RFC7230 https://tools.ietf.org/html/rfc7230section-3.5 which states: Although the line terminator for the start-line and header fields is the sequence CRLF, a recipient MAY recognize a single LF as a line terminator and ignore any preceding CR...

Mata message board backend has a universal password login vulnerability

Marta Message Board is a no-refresh message board program. A universal password login vulnerability exists in the background of Marta Message Board, which can be exploited by an attacker to log in directly to the background...

Arbitrary File Deletion Vulnerability in Ocean CMS Backend

Ocean CMS is a web content management system based on PHP+MYSQL architecture that can run across platforms. Ocean CMS backend there are arbitrary file deletion vulnerability, attackers can use the vulnerability to delete any file...

ReconCobra - Complete Automated Pentest Framework For Information Gathering

ReconCobra Reconcobra is Foot printing software for Ultimate Information Gathering Kali, Parrot OS, Black Arch, Termux, Android Led TV Interface Software have 82 Options with full automation with powerful information gathering capability In-Action !https://blogger.googleuser...