Code Execution Vulnerability in LmxCMS V1.4 Backend Te***.cl***.php

Dream Cms, hereinafter referred to as "lmxcms", is a simple and practical website management system cms developed by "10 years" screen name. A code execution vulnerability exists in Te.cl.php in the backend of LmxCMS V1.4. An attacker can exploit this vulnerability to launch a remote command...

Mogul Interactive PC Enterprise Website System Backend Exists Vulnerability of Ultra-rights Access

Xi'an Mogul Interactive Technology Co., Ltd. is to provide a series of services for enterprises from website building analysis, web design, website optimization and so on. Xi'an Mogul Interactive Technology Co., Ltd. website building system has a vulnerability of unauthorized access. Attackers ca...

SeoToaster Ecommerce CRM CMS 3.0.0 - Local File Inclusion

SeoToaster Ecommerce CRM CMS 3.0.0 - Local File Inclusion Exploit Title: SeoToaster Ecommerce 3.0.0 - Local File Inclusion Dork: N/A Date: 2019-01-17 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.seotoaster.com/shopping-cart/ Software Link:...

Mogul Interactive website builder system backstage login page has a universal password login vulnerability

Xi'an Mogul Interactive Technology Co., Ltd. is to provide a series of services for enterprises from website building analysis, web design, website optimization and so on. There is a universal password login vulnerability in the background login page of Mogul Interactive website builder system,...

Code execution vulnerability in zzzphp V1.6.0 backend

zzphp is a free website building system developed using PHP. A code execution vulnerability exists in the zzzphp V1.6.0 backend, which can be exploited by an attacker to deposit arbitrary code and execute it...

Privilege Escalation

github.com/kubernetes/kubernetes is vulnerable to privilege escalation. Authenticated users are able to directly access a backend server through the Kubernetes API server using specially crafted requests. A remote attacker who is authenticated to the Kubernetes API server only will be able to sen...

Cross-site Scripting (XSS)

spacewalk-backend is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as a cross-site scripting XSS flaw was found in how the failed action entry is processed in Red Hat Satellite before version 5.8.0. A user able to specify a failed action could exploit this flaw to perfo...

Privilege Escalation

spacewalk-backend is vulnerable to privilege escalation attacks. The vulnerability exists as it was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect authorization check in backend/server/rhnChannel.py...

Denial Of Service (DoS)

python-django-horizon is vulnerable to denial of service. Session records are not properly handled when using a db or memcached session engine, allowing remote attackers to make repeated requests to the login page to create excessive backend session entries which would potentially result in a...

Denial Of Service (DoS)

openldap is vulnerable to denial of service DoS attacks. The vulnerability exists as an off-by-one error leading to a crash was discovered in openldap's processing of DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS response...

Information Disclosure

openstack-glance is vulnerable to information disclosure attacks. The vulnerability exists as OpenStack Image Registry and Delivery Service Glance 2013.2 through 2013.2.1 and Icehouse before icehouse-2 logs a URL containing the Swift store backend password when authentication fails and WARNING...

Authorization Bypass

python-keystoneclient is vulnerable to authorization bypass. An attacker with direct write access to the memcache backend is able to insert malicious data and bypass the encryption to tamper the encrypted data or modify data in memcached. Only setups that use memcache caching in the Keystone...

Information Disclosure

spacewalk-backend is vulnerable to information disclosure attacks. The vulnerability exists as the Inter-Satellite Sync ISS operation in Red Hat Network RHN Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by skippi...

Improper Invalidation Of Token

openstack-keystone is vulnerable to access bypass attacks. The vulnerability exists as the memcache token backend in OpenStack Identity Keystone 2013.1 through 2.013.1.4, 2013.2 through 2013.2.2, and icehouse before icehouse-3, when issuing a trust token with impersonation enabled, does not inclu...

PT-2019-8297 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 5.3.4 Description: The issue is related to a PHP Object Instantiation problem. It can be triggered via the sort parameter to the loadPreviewAction method of the Shopware Controllers Backend ProductStream controller...

SQL injection vulnerability in zzzphp V1.6.0 backend sa***.php page

zzphp is a free website building system developed using PHP. zzzphp V1.6.0 SQL injection vulnerability exists in the background sa.php page, which can be exploited by attackers to obtain sensitive information from the database...

Code execution vulnerability in zzzphp V1.6.0 backend

zzphp is a free website building system developed using PHP. zzzphp V1.6.0 code execution vulnerability exists in the background, an attacker can exploit the vulnerability to execute arbitrary code and obtain control of the web server...

ALPINE-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

DEBIAN-CVE-2019-6133

In PolicyKit aka polkit 0.115, the "start time" protection mechanism can be bypassed because fork is not atomic, and therefore authorization decisions are improperly cached. This is related to lack of uid checking in polkitbackend/polkitbackendinteractiveauthority.c...

Fedora 28 : php-horde-Horde-Image (2019-944ff52ce6)

HordeImage 2.5.4 - mjr SECURITY: Fix potential RCE in the text method when using the Imagemagick backend. - mjr SECURITY: Sanitize image type parameter PR: 2, Fariskhi Vidyan. - mjr Fix issues with escaping single and double quote characters in the text method when using the Imagemagick backend...