Arbitrary File Deletion Vulnerability in HongCMS (CNVD-2021-47696)

HongCMS is a lightweight website system. HongCMS suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

File upload vulnerability in HongCMS (CNVD-2021-46896)

HongCMS is a lightweight website system. A file upload vulnerability exists in HongCMS, which can be exploited by attackers to gain control of the server...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-46735)

AKCMS is a lightweight CMS builder with distinctive and compact features. AKCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-47152)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Unspecified vulnerability in JerryScript (CNVD-2021-42987)

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsestatements in js-parser-statm.c:2756 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...

SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2020:14398-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14398-1 advisory. - Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231,...

[SECURITY] [DLA 2682-1] mrxvt security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2682-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta June 09, 2021 https://wiki.debian.org/LTS - -----------------------------------------------------------------------...

Parvan Dobrev scimono 注入漏洞

Parvan Dobrev scimono is Parvan Dobrev an open source application . A server-side and a client-side are provided. Parvan Dobrev scimono suffers from an injection vulnerability, which stems from incorrect innocuous handling of input, where an unauthenticated attacker could inject specially designe...

[SECURITY] Fedora 33 Update: musl-1.2.2-1.fc33

musl is a C standard library to power a new generation of Linux-based devices. It is lightweight, fast, simple, free, and strives to be correct in the sense of standards conformance and safety...

Important: Red Hat Security Advisory: runc security update

An update for runc is now available for Red Hat Enterprise Linux 7 Extras. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

OpenSMTPD: Multiple vulnerabilities

Background OpenSMTPD is a lightweight but featured SMTP daemon from OpenBSD. Description Multiple vulnerabilities have been discovered in OpenSMTPD. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by connecting to the SMTP listener daemon, could possibly...

CVE-2020-13602

Remote Denial of Service in LwM2M dowriteoptlv. Zephyr versions = 1.14.2, = 2.2.0 contain Improper Input Validation CWE-20, Loop with Unreachable Exit Condition 'Infinite Loop' CWE-835. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-g9mg-fj58-6fqh...

[SECURITY] Fedora 34 Update: python-starlette-0.14.2-6.fc34

Starlette is a lightweight ASGI framework/toolkit, which is ideal for build ing high performance asyncio services. It is production-ready, and gives you the following: Seriously impressive performance. WebSocket support. GraphQL support. In-process background tasks. Startup and shutdown events...

Debian: Security Advisory (DSA-4916-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4916-1 : prosody - security update

Multiple security issues were found in Prosody, a lightweight Jabber/XMPP server, which could result in denial of service or information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Command execution vulnerability in YCCMS (CNVD-2021-37966)

YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a command execution vulnerability that can be exploited by attackers to gain control of the server...

Markdownify 1.2.0 Cross Site Scripting / Code Execution

Exploit Title: Markdownify 1.2.0 XSS to RCE Exploit Author: TaurusOmar Twitter:@TaurusOmar HomePage:taurusomar.com Date: May 4th, 2021 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Risk: High 8.8 Vendor Homepage: https://github.com/amitmerchant1990/electron-markdownify Version: 1.2.0 Tested on:...

[SECURITY] Fedora 34 Update: axel-2.17.10-1.fc34

Axel tries to accelerate HTTP/FTP downloading process by using multiple connections for one file. It can use multiple mirrors for a download. Axel has no dependencies and is lightweight, so it might be useful as a wget clone on byte-critical systems...

[SECURITY] Fedora 33 Update: axel-2.17.10-1.fc33

Axel tries to accelerate HTTP/FTP downloading process by using multiple connections for one file. It can use multiple mirrors for a download. Axel has no dependencies and is lightweight, so it might be useful as a wget clone on byte-critical systems...

Fedora: Security Advisory for axel (FEDORA-2021-90b4716992)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...