Microsoft Windows and Windows Server Code Execution Vulnerabilities

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A code execution vulnerability exists in Microsoft Windows and Windows Server that can be...

Quest Software KACE K1000 Systems Management Appliance Code Execution Vulnerability

The Quest Software KACE K1000 Systems Management Appliance KACE SMA is a systems management appliance from Quest Software, USA. A security vulnerability exists in the service/krashrpt.php file in Quest Software KACE SMA versions prior to 6.4 SP3 6.4.120822. A remote attacker can exploit the...

CVE-2020-2158

The CVE-2020-2158 entry affects Jenkins Literate Plugin versions 1.0 and earlier. The root cause is that the YAML parser is not configured to prevent instantiation of arbitrary types, enabling remote code execution. The impact is remote code execution with the plugin, and multiple sources identif...

CVE-2016-11021

setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code via an OS command in the SystemCommand parameter...

Code Execution Vulnerability in YY Voice

YY Voice is an Internet-based team voice communication platform developed by Guangzhou Huado Network Technology Co. A code execution vulnerability exists in YY Voice, which can be exploited by an attacker to execute arbitrary code...

Code Execution Vulnerability in Crypto Game Box

Quick Play Game Box is a treasure trove of games for game lovers. A code execution vulnerability exists in Quick Play Game Box, which can be exploited by attackers to execute arbitrary code...

Dell Security Management Server Code Issue Vulnerability

Dell Security Management Server is a data security management solution from Dell Dell. A code issue vulnerability exists in Dell Security Management Server versions prior to 10.2.10. The vulnerability stems from an improperly designed or implemented code development process for a network system o...

Code Execution Vulnerability in Yimin Trader Jiying

Yimin Trader Smart Earnings is a stock investors special computerized securities finance tools. Yimin Trader Zhiying has a code execution vulnerability that can be exploited by attackers to execute arbitrary code...

Command Execution Vulnerability in RGCMS

RuiGu information management system RGCMS is a set of open source building management system, using PHP language, written in the framework of Thinkphp5.1.+, the database using MYSQL database. RGCMS has a command execution vulnerability that can be exploited by attackers to gain control of the web...

Command Execution Vulnerability in Xianqi Kindergarten Management System

Xianqi Kindergarten Management System is a professional and easy-to-use kindergarten online management system, which supports real-time synchronization of smartphone APP and computer data. A command execution vulnerability exists in the kindergarten management system, which can be exploited by...

Command Execution Vulnerability in PbootCMS V1.3.2

PbootCMS is an open source enterprise building content management system CMS developed using the PHP language. PbootCMS V1.3.2 suffers from a command execution vulnerability that can be exploited by an attacker to execute code...

CVE-2020-8809

Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by modifying the contents of gurux.fi/obis/files.xml and gurux.fi/updates/updates.xml. Then, the attack...

Huawei EulerOS: Security Advisory for e2fsprogs (EulerOS-SA-2020-1098)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Command Execution Vulnerability in the Backend of siyucms Content Management System of Shenyang Dotcom Technology Co.

SIYUCMS is based on the latest version of ThinkPHP-5.1.X framework, the backend front-end framework using AdminLTE. the core concept of the system is " do the most suitable for the enterprise CMS ". Shenyang point to move Technology Co. siyucms content management system backend there is a command...

Code execution vulnerability in QQMusic installation package

QQ Music QQMusic is the official music playback software launched by Tencent. A code execution vulnerability exists in the QQMusic installation package. An attacker can exploit the vulnerability to execute task code...

Code Execution Vulnerability in Thunderbolt X Installer

Thunderbolt X is an Internet download tool software. A code execution vulnerability exists in the Xunlei X installer. An attacker can exploit the vulnerability to execute arbitrary code...

Code Execution Vulnerability in Sohu Video

Sohu Video is a video acceleration player. A code execution vulnerability exists in Sohu Video. An attacker can exploit the vulnerability to execute arbitrary code...

Critical: Red Hat Security Advisory: flash-plugin security update

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Exploit for Improper Handling of Exceptional Conditions in Openbsd Opensmtpd

cve-2020-7247 Exploit Title: OpenSMTPD 6.6.2 - Remote Code Exe...

Wowza Streaming Engine Code Execution Vulnerability

Wowza Streaming Engine is a streaming media server software from Wowza Media Systems. The program supports live streaming, VOD, online video chat, and remote recording. A security vulnerability exists in Wowza Streaming Engine. The vulnerability stems from the lack of proper validation of client...