5523 matches found
Zoho ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions are vulnerable to file uploads, which can be exploited by attackers to cause remo...
Zoho ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. The software assists AD administrators and helpdesk technicians with day-to-day administrative tasks, such as batch management of user...
Zoho ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...
Zoho ManageEngine ADManager Plus 代码问题漏洞
ZOHO ManageEngine ADManager Plus is a suite of Microsoft Active Directory management software from ZOHO designed for enterprise users using Windows domains. ZOHO ManageEngine ADManager Plus 7110 and earlier versions contain a file upload vulnerability that can be exploited by attackers to cause...
Honeywell Experion PKS 和 ACE Controllers 代码问题漏洞
Honeywell Experion PKS and Honeywell Ace Controllers are both products of Honeywell, Inc. Honeywell Experion PKS is a process automation system. Honeywell Ace Controllers are used to execute Honeywell's Control Execution Environment Cee on a server-grade computer platform. Honeywell Ace Controlle...
OnionShare 安全漏洞
OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare has a file upload vulnerability tha...
ZOHO ManageEngine ADManager Plus File Upload Vulnerability (CNVD-2021-78737)
ZOHO ManageEngine ADManager Plus is an easy-to-use Windows Active Directory management and reporting solution. A file upload vulnerability exists in ZOHO ManageEngine ADManager Plus prior to version 7111, which can be exploited by an attacker to achieve remote code execution...
Huawei FusionCompute Incorrect File Upload Control Vulnerability
Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. A security vulnerability exists in Huawei FusionCompute, which stems from the application improperly validating uploaded files...
Design/Logic Flaw
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...
CVE-2021-22005
CVE-2021-22005 affects VMware vCenter Server via an arbitrary file upload vulnerability in the Analytics service. With network access to port 443, an attacker can upload a crafted file to trigger remote code execution. Public PoCs and exploits exist (e.g., VM attack surfaces and multiple advisori...
FrogCMS 代码问题漏洞
FrogCMS an open source content management system. FrogCMS file upload vulnerability exists, the vulnerability is due to product design flaws do not limit the file upload, an attacker can use this vulnerability to upload malicious files to remotely execute arbitrary code...
ABB system access point 信息泄露漏洞
ABB Asea Brown Boveri Ltd ABB system access point is the control center for the ABB-free@home™ smart home system from ABB Asea Brown Boveri Ltd, Sweden. A security vulnerability exists in free@home System Access Poing, which arises from a problem with the software's integrity checking. The...
Wordpress Plugin 3DPrint Lite 1.9.1.4 - Arbitrary File Upload
Exploit Title: Wordpress Plugin 3DPrint Lite 1.9.1.4 - Arbitrary File Upload Google Dork: inurl:/wp-content/plugins/3dprint-lite/ Date: 22/09/2021 Exploit Author: spacehen Vendor Homepage: https://wordpress.org/plugins/3dprint-lite/ Version: spacehen www.github.com/spacehen" def printusage:...
VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server
VMware on Tuesday published a new bulletin warning of as many as 19 vulnerabilities in vCenter Server and Cloud Foundation appliances that a remote attacker could exploit to take control of an affected system. The most urgent among them is an arbitrary file upload vulnerability in the Analytics...
Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)
See the Updates section at the end of this post for new information as it comes to light, including reports of exploitation. Description On Tuesday, September 21, 2021, VMware published security advisory VMSA-2021-0020, which includes details on CVE-2021-22005, a critical file upload vulnerabilit...
Wuzhi WUZHI CMS 安全漏洞
Wuzhi WUZHI CMS is an open source content management system CMS based on PHP and MySQL by Wuzhi. A security vulnerability exists in WUZHI CMS under 4.1.0, which stems from a blacklist bypass issue in common.func.php and can lead to remote code execution when uploaded...
TinyFileManager Cross-Site Scripting Vulnerability
TinyFileManager is a web-based file manager used to store, upload, edit and manage files and folders online via a web browser. It is used to store, upload, edit and manage files and folders online via a Web browser. A cross-site scripting vulnerability exists in TinyFileManager 2.4.6 and all...
CVE-2020-21483
An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file...
