283 matches found
Apple CMS has a logic flaw vulnerability
Apple CMS program is a fast website building system that runs on PHP+MYSQL environment. Apple CMS has a logic flaw vulnerability that can be exploited by attackers to delete arbitrary files and cause a system reinstallation...
Cisco VPN Concentrator 3000 FTP Unauthorized Administrative Access
This module tests for a logic vulnerability in the Cisco VPN Concentrator 3000 series. It is possible to execute some FTP statements without authentication CWD, RNFR, MKD, RMD, SIZE, CDUP. It also appears to have some memory leak bugs when working with CWD commands. This module simply creates an...
Sichuan Ledu Software Co., Ltd. smart campus integrated management system has logic flaws and vulnerabilities
Sichuan Ledu Software Co., Ltd. is a company mainly engaged in computer hardware and software, instrumentation, network information technology development, technical consulting, technical services and other projects. There is a logic flaw vulnerability in the Smart Campus Integrated Management...
Logic flaw vulnerability exists in cmseasy (CNVD-2020-32605)
CmsEasy is a website content management system based on PHP+Mysql architecture and a PHP development platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modify payment amounts...
Emercoin has a flawed logic vulnerability
Emercoin is a cryptocurrency. A security vulnerability exists in Emercoin 0.7 and earlier versions. An attacker could exploit the vulnerability to cause a denial of service...
KLA11790 Multiple vulnerabilities in Apple iCloud
Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to perform cross-site scripting attack, execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A logic vulnerability in...
Cool Music for Android has a flawed logic vulnerability
Cool Music is an online digital music platform. A logic flaw vulnerability exists in CoolMusic for Android. An attacker can exploit the vulnerability to perform unauthorized operations...
Crowdnext has a flawed logic vulnerability
Crowdnext CNX is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of CNX's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...
Logic Flaw Vulnerability in T-Swap-Token
T-Swap-Token T-S-T is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in T-S-T's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...
Xi'an Baolian Network Technology Co., Ltd. construction system has logical flaws and vulnerabilities
Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. There is a logic flaw vulnerability in the construction system of Xi'an Bailian Network Technology Co. Attackers take...
Logic Flaw Vulnerability in EcoTimes.com Corporate Online Bookkeeping Management System
EcoTimes.com Business Online Bookkeeping Management System PHP is a commercial system. There is a logic flaw vulnerability in the EcoTimes.com Enterprise Online Bookkeeping Management System that can be exploited by attackers to obtain sensitive information...
Suzhou Topps Network Technology Co., Ltd. website building system has a logic flaw vulnerability
Suzhou Topps Network Technology Co., Ltd. is a computer software, computer animation and network products design, research and development, sales, and provide related technical services and consulting services company. Suzhou Topps Network Technology Co., Ltd. website building system has a logic...
Logic Flaw Vulnerability in Liangjing Mall Online Shop Shopping System
Liangjing Mall online store shopping system is a set of multi-functional online store system that can fit different types of commodities, super flexible, three-tier distribution PC+mobile+micro-site, which provides a complete online store solution. There is a logic flaw vulnerability in LiangJing...
Design/Logic Flaw
A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary locations with SYSTEM privileges although not controlling the contents of such files due to insufficient sanitisation when passing arguments to th...
Design/Logic Flaw
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via an uploaded document, when the attacker has write access to a project...
KLA11650 Multiple vulnerabilities in Apple iCloud
Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, perform cross-site scripting attack, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Multiple memory corruption...
DSMall has a flawed logic vulnerability
DSMALL is a large B2B2C multi-user mall system , enterprise-class e-commerce mall system , code open source . DSMall there are logical flaws vulnerabilities , attackers can exploit the vulnerability to delete any account invoice information...
UEESHOP has a flawed logic vulnerability
UEESHOP is a domestic self-built website platform focusing on cross-border e-commerce, providing fast self-built website services for cross-border e-commerce retail sellers and foreign trade exporters. UEESHOP has a logic flaw vulnerability. Attackers can use the vulnerability to obtain sensitive...
Design/Logic Flaw
CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life EOL status on April 1, 201...
Design/Logic Flaw
The processCommandSetMac function of libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user...