PageKit Cross-Site Scripting Vulnerability

Pagekit is a modular, lightweight CMS content management system. pageKit has a cross-site scripting vulnerability, which stems from the fact that SVG files may contain malicious scripts that can be exploited by attackers to trigger XSS attacks...

Netapp E-Series SANtricity OS Controller Software Remote Code Execution Vulnerability

Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from NetApp, Inc. A security vulnerability exists that could be exploited by a privileged attacker to execute arbitrary code...

Unauthorized Access Vulnerability in Cisco IP Phone CP-7911G

The Cisco IP Phone CP-7911G is an IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-7911G, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Cisco IP Phone CP-8851

The Cisco IP Phone CP-8851 is an enterprise-class IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-8851, which can be exploited by an attacker to obtain sensitive information...

Command Execution Vulnerability in TamronOS IPTV/VOD Systems

Weifang Home Station Electronic Technology Co., Ltd. is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A command execution vulnerability exists in the TamronOS IPTV/VOD system, which can be exploited by...

Apple iOS < 12.5.4 Multiple Vulnerabilities (HT212548)

Binary data appleios1254check.nbin...

Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System

Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...

Patch now! Apple fixes in-the-wild iPhone vulnerabilities

Apple has fixed two vulnerabilities in Safaris WebKit component, announcing it is aware of a report that they may have been actively exploited. Both vulnerabilities could be abused by maliciously crafted web content that could lead to arbitrary code execution: In other words, the bugs let rogue...

Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild

Apple on Monday shipped out-of-band security patches to address two zero-day vulnerabilities in iOS 12.5.3 that it says are being actively exploited in the wild. The latest update, iOS 12.5.4, comes with fixes for three security bugs, including a memory corruption issue in ASN.1 decoder...

Unauthorized Access Vulnerability in AXIS P3344 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P3344 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M3114 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M3114 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M7014 Video Encoder

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M7014 Video Encoder, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS P1353 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P1353 Network Camera, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in Schneider Electric EcoStruxure Control Expert (CNVD-2021-45385)

Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric logic controller products. A denial of service vulnerability exists in Schneider Electric EcoStruxure Control Expert, which can be exploited by an attacker to cause the program to crash...

Unauthorized Access Vulnerability in AXIS M1103 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M1103 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS 211W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 211W Network Camera, which can be exploited by attackers to obtain sensitive information...

CVE-2021-0489

creationtimestamp| type| source ---|---|--- 2021-06-11 20:21:01+00:00| exploited| Telegram/0ErPWNJ2hsNVJrl3YsSuPJ2ZmHthdFqIxfXDSUt8xDZuTg...

Code injection

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code...

CVE-2021-28805 Inclusion of Sensitive Information in QSS

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...