http_server path traversal vulnerability (CNVD-2019-46974)

httpserver is an HTTP server utility class. A path traversal vulnerability exists in httpserver. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access location...

Webshell bypass vulnerability in D-Shield firewall (CNVD-2020-04088)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. A webshell bypass vulnerability exists in D-Shield Firewall. An attacker can exploit this vulnerability to gain access to the target server's administrative privileges...

Elephone A4 Access Control Error Vulnerability

Elephone A4 is a smartphone from China's ELEPHONE Communication Technology. An Access Control Error vulnerability exists in the Elephone A4. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles and can be exploited b...

JavaScript Privilege Bypass Vulnerability in Adobe Acrobat and Reader

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader there is a JavaScript privilege bypass vulnerability, attackers...

XSS Vulnerability in Cool Arts Culture Website Building System

Cool Art Culture Network Technology Co., Ltd. is a network service organization focusing on high-end website construction and brand communication. There is an XSS vulnerability in the Cool Art Culture website builder system, which can be exploited by attackers to inject arbitrary Web scripts or...

SQL Injection Vulnerability in Apple CMS

Apple CMS is a domestic open source PHP station-building system , specializing in Apple CMS movie program , Apple CMS video program , Apple CMS film and television system this piece , with a distinct , in order to be flexible , compact , good compatibility , strong load and so on. Apple CMS SQL...

Arbitrary File Read Vulnerability in Zendo Project Management System

Zendo is China's first open source project management software. It integrates product management , project management , quality management , document management , organization management and transaction management. Zendo project management system has an arbitrary file read vulnerability , an...

Iran Targets Mideast Oil with ZeroCleare Wiper Malware

A freshly-discovered wiper malware dubbed “ZeroCleare” has been deployed to target the energy and industrial sectors in the Middle East. According to IBM’s X-Force Incident Response and Intelligence Services IRIS, ZeroCleare so-named because of the program database pathname of its binary file was...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46633)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

ZTE ZXR10 1800-2S suffers from a file read vulnerability (CNVD-2019-46635)

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A file read vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to read arbitrary files...

VMware Carbon Black Threat Report: One Year Out From the 2020 U.S. Elections, Geopolitical Tension Continues to Spawn Cyberattacks

This morning, VMware Carbon Black released its latest Global Incident Response Threat Report GIRTR. Now in its fourth edition, the GIRTR is written in partnership with VMware Carbon Black's incident response IR partner ecosystem and aggregates input from top IR experts to give you, the reader, a...

Lenovo ThinkPad USB-C Dock Denial of Service Vulnerability

The Lenovo ThinkPad USB-C Dock is an interface docking station from the Chinese company Lenovo Lenovo. A denial of service vulnerability exists in the Lenovo ThinkPad USB-C Dock with firmware version 3.7.2, which can be exploited by attackers to cause a denial of service...

tcpdump buffer overflow vulnerability (CNVD-2019-41918)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer overflow vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to properly valida...

HkCMS suffers from an arbitrary file download vulnerability

HkCMS has been committed to providing free and open source content management system for enterprise station building, HkCMS has excellent expansion and secondary development capabilities, can be adapted to enterprise lightweight system development and deployment. HkCMS arbitrary file download...

Lovecraft Universal Player suffers from dll hijacking vulnerability

Aqiyi Universal Player is a mainstream video and audio player developed by Aqiyi official independent research and development, supporting most of the mainstream media formats. There is a dll hijacking vulnerability in Aqiyi Universal Player, which can be exploited by an attacker to execute...

Denial of Service Vulnerability in TP-Link AC1900 Routers

The TP-Link AC1900 is a mini wireless router from China P&L TP-Link. The TP-Link AC1900 suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in Profile 30.0 of Qixing Filing System (CNVD-2020-00009)

Qixing File System Profile 30.0 is a system for managing employee files, contracts, training, personnel, attendance, payroll and other information within an organization. Kaixing File System Profile 30.0 suffers from an unauthorized access vulnerability, which can be exploited by attackers to...

Arbitrary File Deletion Vulnerability in LeShang Mall

LeShares is a lightweight mall website management system, based on Thinkphp5+Mysql architecture, running on Linux, Windows, MacOSX, Solaris and other various platforms. LeShang Mall arbitrary file deletion vulnerability, an attacker can use this vulnerability to arbitrarily delete server files...

Trump, Putin and Politics Name-Dropped to Peddle Malware

With the U.S. presidential elections looming, bad actors are tapping into the political craze with several malware distribution campaigns, using high-profile political names to tap into victims’ emotions and convince them to click on malicious links. Researchers have uncovered hundreds of...

Unspecified Vulnerability in D-Link DIR-865L

The D-Link DIR-865L is a wireless router from AUO D-Link of Taiwan, China. An unspecified vulnerability exists in the D-Link DIR-865L. No detailed vulnerability details are provided at this time...