953 matches found
Acronis VSS Doctor 代码问题漏洞
Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...
CVE-2022-23365
HMS v1.0 was discovered to contain a SQL injection vulnerability via doctorlogin.php...
CVE-2021-44159 4MOSAn GCB Doctor - Unrestricted Upload of File
4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...
CVE-2021-44159
CVE-2021-44159 concerns 4MOSAn GCB Doctor’s file upload function, where improper user privilege control allows an unauthenticated remote attacker to upload arbitrary files (including webshells) and potentially execute code, enabling arbitrary system operations or a denial of service. The vulnerab...
4MOSAn GCB Doctor 代码问题漏洞
Radiant Tech 4Mosan Gcb Doctor Government Common Configuration Setup and Detection is Radiant Tech's pipeline for effectively controlling hacking of personal computers and reducing security incidents. A code issue vulnerability exists in 4MOSAn GCB Doctor, which stems from the product's failure t...
CVE-2021-44159
4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...
9.3M+ Androids Running ‘Malicious’ Games from Huawei AppGallery
Why would a game about a cat’s “cute diary” need permission to make phone calls or suss out your location? It doesn’t: “Cat cute diary” is one of 190 trojanized games that Doctor Web malware analysts have found on AppGallery, the official app store for Huawei Android. They’re littering the Androi...
Over 9 Million Android Phones Running Malware Apps from Huawei's AppGallery
At least 9.3 million Android devices have been infected by a new class of malware that disguises itself as dozens of arcade, shooter, and strategy games on Huawei's AppGallery marketplace to steal device information and victims' mobile phone numbers. The mobile campaign was disclosed by researche...
Cross-site Scripting in kimai2
Cross site request forgery vulnerability is present in delete functionality of doctor feature. This vulnerability is capable of deleting system logs...
CVE-2021-42338 4MOSAn GCB Doctor - Improper Authorization
4MOSAn GCB Doctor’s login page has improper validation of Cookie, which allows an unauthenticated remote attacker to bypass authentication by code injection in cookie, and arbitrarily manipulate the system or interrupt services by upload and execution of arbitrary files...
Cross-Site Request Forgery (CSRF) in kevinpapst/kimai2
Description cross site request forgery vulnerability is present in delete functionality of doctor feature. Proof of Concept history.pushState'', '', '/' document.forms0.submit; Impact This vulnerability is capable of delete the existing logs...
CVE-2021-39411
Multiple Cross Site Scripting XSS vulnerabilities exist in PHPGurukul Hospital Management System 4.0 via the 1 searchdata parameter in a doctor/search.php and b admin/patient-search.php, and the 2 fromdate and 3 todate parameters in admin/betweendates-detailsreports.php...
PT-2021-22580 · Unknown · Phpgurukul Hospital Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in the system. The issue is related to the searchdata parameter in "/doctor/search.php" and "/admin/patient-search.php" API...
PHPGurukul Hospital Management System 跨站脚本漏洞
PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System 4.0 has a security vulnerability that can be exploited by an attacker to conduct xss attacks using multiple parameters. The parameters that can be exploited are 1...
CVE-2020-6931
HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...
CVE-2020-6931
HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...
Privilege escalation
HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...
CVE-2020-6931
CVE-2020-6931 concerns the HP Print and Scan Doctor utility. The connected sources identify a local elevation of privilege as the component impact, affecting HP’s Windows tool (HP Print and Scan Doctor). The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE listings) with a hig...
CVE-2020-6931
HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege...
HP Print and Scan Doctor 安全漏洞
HP Print and Scan Doctor is a free tool for Windows from Hewlett-Packard HP that helps solve printing and scanning problems. A security vulnerability exists in HP Print and Scan Doctor, which stems from problems with the software's management of privileges and may be susceptible to potential...