Unauthorized Access Vulnerability in MX-4070V of Sharp Trading (China) Co.

MX-4070V is a printer product of Sharp Trading China Co. An unauthorized access vulnerability exists in the Sharp Trading China Co. MX-4070V, which can be exploited by attackers to obtain sensitive information...

Vulnerability in the Kaspersky Password Manager

A vulnerability just patched in the random number generator used in the Kaspersky Password Manager resulted in easily guessable passwords: The password generator included in Kaspersky Password Manager had several problems. The most critical one is that it used a PRNG not suited for cryptographic...

Arbitrary File Download Vulnerability in iOffice Hospital Edition

hereinafter referred to as: Redfan Technology is one of the top ten military industrial groups - China State Shipbuilding Corporation under the Guangzhou Shipbuilding International Company Limited Holdings of high-tech enterprises. iOffice Hospital Edition exists arbitrary file download...

Unauthorized Access Vulnerability in SINDOH A603_A608 at SINDOH (Qingdao) Office Systems Co.

Xindu Qingdao Office System Co., Ltd. is a professional office equipment enterprise integrating research and development, production, sales and after-sales service. SINDOH A603A608 of SINDOH Qingdao Office Systems Co., Ltd. has an unauthorized access vulnerability, which can be exploited by an...

Binary vulnerability in guthrie CAD Markup 2021 (CNVD-2021-51423)

CAD Markup is a CAD viewing software from Guthrie. A binary vulnerability exists in guthrie CAD Markup 2021, which can be exploited by attackers to cause the program to crash...

SQL Injection Vulnerability in Ai Qing Lemon CMS (CNVD-2021-51248)

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

File Upload Vulnerability in Oracle Website Marketing System

Oxbridge Website Marketing System is an open source content management system, the product is based on PHP+MYSQL architecture, and can run on Windows, Linux, MacOSX, Solaris and other various platforms. Oxbones Website Marketing System has a file upload vulnerability that can be exploited by an...

Csdn APP has XSS vulnerability

Csdn APP is an IT community software for cell phones. Csdn APP has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

File Upload Vulnerability in Exam Hall Management System

Exam Hall Management System is a PHP project that automates the process of exam assignment and seating arrangements. A file upload vulnerability exists in Exam Hall Management System, which can be exploited by an attacker to upload a webshell and gain server privileges...

Command Execution Vulnerability in Oracle's Website Marketing System

Oxbridge Website Marketing System is an open source content management system, the product is based on PHP+MYSQL architecture, and can run on Windows, Linux, MacOSX, Solaris and other various platforms. Oxbones Website Marketing System has a command execution vulnerability that can be exploited b...

Cross-site Scripting (XSS) - Stored in bigprof-software/online-invoicing-system

✍️ Description In the repo online invoicing system i found a stored xss which gets exploited on member profile view which is lead by group name. 🕵️‍♂️ Proof of Concept Video POC: https://drive.google.com/file/d/1wUNY4BQyvI5RzutUn8T5KbTRMAIAZOlJ/view?usp=sharing Steps to reproduce: 1. Create a group...

Huawei EMUI/Magic UI DoS Vulnerability (CNVD-2021-64504)

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to a DoS vulnerability, which can be exploited by attackers to cause a temporary denial of service...

ThinkPHP has a deserialization vulnerability

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP has a deserialization vulnerability that can be exploited by attackers to gain server control privileges...

SQL Injection Vulnerability in Ai Qing Lemon CMS (CNVD-2021-49601)

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)

The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...

CVE-2021-35941

Western Digital WD My Book Live 2.x and later and WD My Book Live Duo all versions have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472...

CVE-2021-35941

Western Digital WD My Book Live 2.x and later and WD My Book Live Duo all versions have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472...

Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49108)

OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...

Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49111)

OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...

Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49110)

OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...