SQL Injection Vulnerability in TPCMS

TPCMS is an open source cms written by thinkphp. TPCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Weak Password Vulnerability in Pacom 8501 Input/Output Module

Pacom is a Swedish company. A weak password vulnerability exists in the Pacom 8501 Input/Output Module, which can be exploited by an attacker to gain access to the backend and obtain sensitive information...

Unauthorized Access Vulnerability in Network Camera WV-ST162 at Panasonic (China) Co.

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network Camera WV-ST162 of Panasonic China Co. which c...

Unauthorized Access Vulnerability in Tenda Roteador Multilaser 1200AC Devices

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. An unauthorized access vulnerability exists in the Tenda Roteador Multilaser 1200AC device, which can be exploited by attackers to...

Command Execution Vulnerability in IceWarp Mail Server

IceWarp Mail Server is an enterprise-grade email, collaboration and mobile solution for organizations of all sizes. A command execution vulnerability exists in IceWarp Mail Server, which can be exploited by an attacker to perform command execution by constructing malicious statements...

CVE-2021-30544

creationtimestamp| type| source ---|---|--- 2021-06-18 14:37:24+00:00| exploited| https://t.me/truesecator/1826 2026-09-01 20:02:36+00:00| seen| https://t.me/hackingAttack/12312 2026-09-02 01:03:12+00:00| seen| https://t.me/hackingAttack/12312 2026-09-08 03:00:05+00:00| exploited|...

Weak Password Vulnerability in Polycom Device Management System

Founded in 1990, Polycom China is a global integrated collaborative communications company. It is a leading provider of high-quality audio and video conferencing systems and solutions. A weak password vulnerability exists in the Polycom device management system, which can be exploited by an...

PageKit Cross-Site Scripting Vulnerability

Pagekit is a modular, lightweight CMS content management system. pageKit has a cross-site scripting vulnerability, which stems from the fact that SVG files may contain malicious scripts that can be exploited by attackers to trigger XSS attacks...

Unauthorized access vulnerability in Isha's back-office management system

Isha Backend Management System is a .NET Core Web-based development system. An unauthorized access vulnerability exists in Yisha Backend Management System, which can be exploited by attackers to obtain sensitive information...

Microsoft Edge (Chromium) < 91.0.864.54 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.54. It is, therefore, affected by multiple vulnerabilities as referenced in the June 18, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Apple iOS < 12.5.4 Multiple Vulnerabilities (HT212548)

Binary data appleios1254check.nbin...

Unauthorized Access Vulnerability in Cisco IP Phone CP-8851

The Cisco IP Phone CP-8851 is an enterprise-class IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-8851, which can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Cisco IP Phone CP-7911G

The Cisco IP Phone CP-7911G is an IP phone. An unauthorized access vulnerability exists in the Cisco IP Phone CP-7911G, which can be exploited by an attacker to obtain sensitive information...

Command Execution Vulnerability in TamronOS IPTV/VOD Systems

Weifang Home Station Electronic Technology Co., Ltd. is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A command execution vulnerability exists in the TamronOS IPTV/VOD system, which can be exploited by...

Netapp E-Series SANtricity OS Controller Software Remote Code Execution Vulnerability

Netapp E-Series SANtricity OS Controller Software is a disk array OS control software from NetApp, Inc. A security vulnerability exists that could be exploited by a privileged attacker to execute arbitrary code...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...

Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System

Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...

Patch now! Apple fixes in-the-wild iPhone vulnerabilities

Apple has fixed two vulnerabilities in Safaris WebKit component, announcing it is aware of a report that they may have been actively exploited. Both vulnerabilities could be abused by maliciously crafted web content that could lead to arbitrary code execution: In other words, the bugs let rogue...

Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild

Apple on Monday shipped out-of-band security patches to address two zero-day vulnerabilities in iOS 12.5.3 that it says are being actively exploited in the wild. The latest update, iOS 12.5.4, comes with fixes for three security bugs, including a memory corruption issue in ASN.1 decoder...

Unauthorized Access Vulnerability in AXIS M7014 Video Encoder

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M7014 Video Encoder, which can be exploited by attackers to obtain sensitive information...