Weintek EasyWeb cMT

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weintek Equipment: cMT Vulnerabilities: Code Injection, Improper Access Control, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Rusavtomatika Weintek EasyWeb cMT 安全漏洞

Rusavtomatika Weintek EasyWeb cMT is an application platform of the Russian company Rusavtomatika. It is used to configure the parameters of the human-machine interface. A security vulnerability exists in Rusavtomatika Weintek EasyWeb cMT that allows an unauthenticated attacker to remotely access...

Weintek EasyWeb cMT

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Weintek Equipment: cMT Vulnerabilities: Code Injection, Improper Access Control, Cross-site Scripting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an...

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-18328)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A stored cross-site scripting vulnerability exists in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9. An attack...

CVE-2020-10461

The way comments in article.php vulnerable function in include/functions-article.php are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/manage-comments.php, via the GET parameter cmt...

CVE-2020-10461: Improper Neutralization of Input During Web Page Generation

The way comments in article.php vulnerable function in include/functions-article.php are handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored Blind XSS injecting arbitrary web script or HTML in admin/manage-comments.php, via the GET parameter cmt...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in add.php in HIOX Guest Book HGB 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name1, 2 email, or 3 cmt parameter...

CVE-2014-1620: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in add.php in HIOX Guest Book HGB 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 name1, 2 email, or 3 cmt parameter...

PT-2014-4262

Name of the Vulnerable Software and Affected Versions HIOX Guest Book HGB version 5.0 Description The issue allows remote attackers to inject arbitrary web script or HTML via the name1, email, or cmt parameters in the add.php file. This can lead to cross-site scripting XSS attacks. Recommendation...

Sun Solaris TCP/IP内核内存破坏拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 使用CMT处理器的Sun Solaris系统在处理超多的快速打开/关闭TCP连接的TCP/IP负载时存在竞争条件问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0 x86 Sun Solaris 10.0 补丁下载： Sun Solaris 10.0 Sun 125100-02 http://sunsolve.sun.com/private-cgi/pdownload.pl?target=125100-02&meth od=h Sun Solaris 10.0 x86 Sun...

CVE-2006-4117

Vulnerability: CVE-2006-4117 affects Sun Solaris 10 (likely SPARC) where the squeue_drain function (also noted as drain_squeue in reports) can be triggered remotely to cause a denial of service, including a possible system panic, by opening/closing a large number of TCP connections under heavy TC...

[SA21453] Sun Solaris "drain_squeue()" Denial of Service

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...