10911 matches found
StoreFront monitor shows down if "Check Backend Services" is enabled
When NetScaler admin try to create a service group and bind StoreFront monitor, the effective state shows down...
File Inclusion Vulnerability in ECShop 2.7.3 Backend
ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECShop 2.7.3 version of the backend file...
EDT Security using DTLS
EDT Security using DTLS As from XenApp and XenDesktop 7.16 VDAs, DTLS is supported refer to the Windows OS VDA 7.16 Schannel library support for DTLS article. This means that backend connection between NetScaler and the VDA could optionally use DTLS. In addition, Receiver could optionally use DTL...
CVE-2017-16857
It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows an attacker to merge any code into unsuspecting repositories. This affects all versions of the auto-unapprove plugin, however since the...
SQL Injection Vulnerability in Chengdu JWT jwcms
Chengdu, Chengdu, this network technology is a Chengdu, engaged in website planning, web design, website construction and development, website optimization, Internet marketing and other professional services in the field of network technology limited company. Chengdu JINWEI TECHNOLOGY jwcms SQL...
SQL Injection Vulnerability in EasySNS Community Backend Administrator locker method
EasySNS community group version for the new database architecture and program structure, to group as the basic unit to form an interactive community. There is a SQL injection vulnerability in the EasySNS Community background administrator locker method, which can be exploited by attackers to obta...
phpaaCMS suffers from an override access vulnerability
phpaaCMS is a simple article management system. An override access vulnerability exists in the /admin/global.php file in phpaaCMS, which can be exploited by an attacker to override backend operations...
HackerOne: Introspection query leaks sensitive graphql system information.
Summary: Interospection query leaks sensitive data. Introduction As we know graphql was initially developed and used by facebook as an internal query language and so the features of graphql mostly revolve around internal and development areas. Graphql executes queries using a type system with the...
SQL Injection
contao/core is vulnerable to SQL Injection attacks. The library does not properly sanitize the search filter in the backend, allowing a malicious user to inject and execute arbitrary SQL commands...
Berjun BOS backend management system suffers from jboss deserialization command execution vulnerability
Shanghai Bojun Software Technology Co., Ltd. is a provider of integrated solutions for the fashion industry. Bethune BOS backend management system exists jboss deserialization command execution vulnerability. The vulnerability is due to the JBOSS middleware deployment interface is not deleted,...
auxblogcms 1.0.6 Backend Login Bypass Vulnerability
auxblogcms is a php personal blog system based on PHP+MySQL program. auxblogcms 1.0.6 has a background bypass login vulnerability, which can be exploited by attackers to bypass background cookies and obtain sensitive information...
Remote Command Execution Vulnerability in the Backend of Esaote E3 Omni-Channel Retail Management Software
E3 omni-channel retail management software is Esaote's e-commerce ERP system for online sales in the fashion industry, integrating Taobao interface, independent B2C mall system, advanced order processing system, logistics and warehousing system, network marketing and promotion system, and...
Shopware 5.3.3: PHP Object Instantiation to Blind XXE
Shopwareis a popular e-commerce software. It is based on PHP using technologies like Symfony 2, Doctrine and the Zend Framework. The code base of its open source community edition encompasses over 690,000 lines of code which we scanned for security vulnerabilities with our RIPS static code...
Shopware 5.3.3: PHP Object Instantiation to Blind XXE
Who is affected Installations with following requirements are affected by this vulnerabilities: Shopware version = 5.3.3 and = 5.1 Impact - What can an attacker do In order to exploit the found vulnerabilities an attacker needs to be able to use the backend functionality of Shopware, specifically...
Arbitrary File Deletion Vulnerability in SchoolCMS
SchoolCMS is a school teaching management system based on PHP+MySQL. An arbitrary file deletion vulnerability exists somewhere in the SchoolCMS backend, which can be exploited by an attacker to delete arbitrary folders...
Cross site scripting
In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...
CVE-2017-16635
In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...
CVE-2017-16635
In TinyWebGallery v2.4, an XSS vulnerability is located in the mkname, mkitem, and item parameters of the Add/Create module. Remote attackers with low-privilege user accounts for backend access are able to inject malicious script codes into the TWG Explorer item listing. The request method to...
Telnet IoT Honeypot - Python Telnet Honeypot For Catching Botnet Binaries
This project implements a python telnet server trying to act as a honeypot for IoT Malware which spreads over horribly insecure default passwords on telnet servers on the internet. Other than https://github.com/stamparm/hontel or https://github.com/micheloosterhof/cowrie examples, which provides...