Project iKy v2.1.0 - Tool That Collects Information From An Email And Shows Results In A Nice Visual Interface

Project iKy is a tool that collects information from an email and shows results in a nice visual interface. Visit the Gitlab Page of the Project Video Installation Clone repository git clone https://gitlab.com/kennbroorg/iKy.git Install Backend Redis You must install Redis wget...

gvfs: Incorrect authorization in admin backend allows privileged users to read and modify arbitrary files without prompting for password

An incorrect permission check in the admin backend in gvfs was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running under privileges of users...

Dedecms backend has arbitrary file reading vulnerability

Dream Content Management System DedeCMS is a PHP open source website management system. Dedecms backend exists arbitrary file read vulnerability, attackers can use the vulnerability to obtain sensitive information...

Arbitrary file upload vulnerability in ucms backend

UCMS is a simple open source content management system. There is an arbitrary file upload vulnerability in the background of ucms, which can be exploited by attackers to gain server privileges...

Code execution vulnerability in 74cms backend Co***.cl***.php file

Knight Talent System 74cms is based on PHP + MYSQL as the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Co.cl.php file there is a code execution vulnerability. Allow attacker...

Real Estate 7 < 2.9.1 - Stored XSS & IDOR

The 'Real Estate 7' premium WordPress theme is vulnerable to persistent XSS injection that allows an attacker to inject JavaScript or HTML code into the website front-end. There is also an Insecure Direct Object Reference issue, allowing unauthorized users to edit listings they should not have...

Real Estate 7 < 2.9.1 - Stored XSS & IDOR

The 'Real Estate 7' premium WordPress theme is vulnerable to persistent XSS injection that allows an attacker to inject JavaScript or HTML code into the website front-end. There is also an Insecure Direct Object Reference issue, allowing unauthorized users to edit listings they should not have...

SQL Injection Vulnerability in ZZZCMS Backend

zzcms is an asp language development of the site building system. There is a SQL injection vulnerability in the backend of ZZZCMS, which can be exploited by attackers to obtain sensitive database information...

Five Fingers CMS 4.1.0 SQL Injection Vulnerability at Backend Theme Category Editor

Beijing Five Fingers Internet Technology Co., Ltd referred to as: Five Fingers Internet is a professional website content management system provider in China. FiveFingersCMS4.1.0 SQL injection vulnerability exists in the background theme category editor, attackers can use the vulnerability to...

SQL Injection Vulnerability in VANOC Enterprise Website Management System Backend

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. VANOC enterprise website management system backend has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...

SQL Injection Vulnerability in Five Fingers CMS Backend Tag Management Service

Five Fingers CMS is a professional content management system. Five Fingers CMS backend tag management system has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...

Five Fingers CMS backend ca***.php file has SQL injection vulnerability

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend ca.php file exists SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

Fedora Update for gvfs FEDORA-2019-6ed5523cc0

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Arbitrary file deletion vulnerability of Co***.cl***.php file in the blue style background of NetShow's Chinese and English foreign trade websites

NetShow Chinese and English foreign trade website blue style is a website management system. There is an arbitrary file deletion vulnerability in the Co.cl.php file in the backend of the blue style of the Nethub Sino-British foreign trade website. An attacker can exploit this vulnerability to...

Code execution vulnerability in UsualToolCMS backend a_la***.php file

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. A code execution vulnerability exists in the UsualToolCMS backend ala.php file. An attacker can exploit this vulnerability to execute arbitrary code...

CVE-2019-13447

An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection...

Sql injection

An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection...

CVE-2019-13447

An issue was discovered in Sertek Xpare 3.67. The login form does not sanitize input data. Because of this, a malicious agent could access the backend database via SQL injection...

Code Execution Vulnerability in OPENSNS Backend

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A code execution vulnerability exists in the OPENSNS backend, which can be exploited by an attacker to gain control of the web server...

The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems is related to permission handling errors when copying files using GFILECOPYALLMETADATA from admin:// to file:// URIs. Exploiting this vulnerability allows an...