4808 matches found
Telnet IoT Honeypot - Python Telnet Honeypot For Catching Botnet Binaries
This project implements a python telnet server trying to act as a honeypot for IoT Malware which spreads over horribly insecure default passwords on telnet servers on the internet. Other than https://github.com/stamparm/hontel or https://github.com/micheloosterhof/cowrie examples, which provides...
YxtCMF v3.1.0 SQL Injection Vulnerability in Frontend ShitiController.class.php Page
YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. YxtCMF v3.1.0 has a SQL injection vulnerability in the frontend ShitiController.class.php page. An attacker can exploit this vulnerability to obtain sensitive...
SQL Injection Vulnerability in YxtCMF Frontend IndexController.class.php Page
YxtCMF Yi Xue Tang Online Learning System is an online learning platform system developed with thinkphp+bootstrap as the framework. A SQL injection vulnerability exists in the IndexController.class.php page of the YxtCMF frontend. An attacker can exploit the vulnerability to obtain sensitive...
[SECURITY] Fedora 25 Update: cacti-1.1.26-1.fc25
Cacti is a complete frontend to RRDTool. It stores all of the necessary information to create graphs and populate them with data in a MySQL database. The frontend is completely PHP driven...
ShopsN 2.2.1 SQL Injection Vulnerability in frontend restore_order method
ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd, an open source online store in line with enterprise-class commercial standards of the whole network system. ShopsN 2.2.1 official version of the foreground restoreorder method SQL injection...
Code execution vulnerability in Typecho frontend
Typecho is an open source blogging platform written in PHP. A code execution vulnerability exists in the Typecho frontend, which can be exploited by an attacker to gain server administrative privileges...
DEBIAN-CVE-2017-15046
LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpackreadsamples in frontend/getaudio.c, a different vulnerability than CVE-2017-9412...
CVE-2017-15046
LAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in unpackreadsamples in frontend/getaudio.c, a different vulnerability than CVE-2017-9412...
SQL Injection Vulnerability in TinyShop Frontend Common.php Page
TinyShop is an e-commerce system online store system based on the Tiny framework, suitable for businesses and individuals to quickly build a personalized online store. A SQL injection vulnerability exists in the TinyShop frontend Common.php page. The vulnerability is due to the system failing to...
Edusoho Online Learning Platform v8.0.16 SQL Injection Vulnerability in Frontend
Edusoho Online Learning Platform is a B2C independent online school system developed by Hangzhou Kuochi Network Technology Co. Edusoho Online Learning Platform v8.0.16 SQL injection vulnerability exists in the frontend. An attacker can use this vulnerability to obtain sensitive information from t...
SQL Injection Vulnerability in TinyShop Frontend ucenter.php Page
TinyShop is an e-commerce system online store system based on the Tiny framework, suitable for businesses and individuals to quickly build a personalized online store. A SQL injection vulnerability exists in the TinyShop frontend ucenter.php page. The vulnerability is due to the system failing to...
Catfish CMS v4.5.7 SQL Injection Vulnerability in Frontend
Catfish CMS is open source free PHP CMS web content management system. Catfish CMS v4.5.7 suffers from a SQL injection vulnerability in the frontend. An attacker can exploit this vulnerability to obtain sensitive database information...
File Upload Vulnerability in BEESCMS
BEESCMS is an enterprise website management system based on PHP+Mysql architecture. BEESCMS V4.0R20160525 version /includes/init.php file variable override script there is a file upload vulnerability, the attacker uses the vulnerability to upload arbitrary files, so as to obtain the front-end...
Cross-Site Scripting (XSS)
forkcms has cross-site scripting XSS vulnerability. The vulnerability is possible because the value returned by the getAllComments function in Frontend/Modules/Blog/Engine/Model.php is not properly escaped, allowing a malicious user to inject and execute arbitrary web script...
SQL Injection Vulnerability in OrderController.class.php in ShopsN 2.0 Official Frontend
ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN 2.0 official version of the front-end OrderController.class.php SQL injection...
SQL Injection Vulnerability in ShopsN v2.0 Frontend OrderGroupController.class.php File
ShopsN is a free e-commerce open source system. ShopsN v2.0 official version of the front-end OrderGroupController.class.php file SQL injection vulnerability. The vulnerability is due to the system failing to effectively filter user-submitted data. An attacker can exploit this vulnerability to...
KODExplorer v4.06 Arbitrary File Read Vulnerability in Frontend
KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...
Etherpad Directory Traversal Vulnerability
Etherpad is the Etherpad Foundation's open source rich-text online collaboration software . frontend tests is one of the front-end test component . A directory traversal vulnerability exists in the node/hooks/express/tests.js file in versions of Etherpad frontend tests prior to 1.6.1. An attacker...
Arbitrary File Write Vulnerability in KODExplorer v4.06 Frontend
KodExplorer Kodo Cloud formerly Mango Cloud is a private cloud and online file management system based on Web technology developed by Shanghai Daimu Networks Co., Ltd. and is committed to providing users with secure and controllable, reliable and easy-to-use, highly scalable private cloud...
