Unspecified Vulnerability in Pango AnchorFree VPN SDK

Pango AnchorFree VPN SDK is a VPN Virtual Private Network software development kit from Pango USA. A security vulnerability exists in Pango AnchorFree VPN SDK versions prior to 1.3.3.218. An attacker can exploit the vulnerability to execute malicious files with SYSTEM privileges...

Microweber Code Issue Vulnerability

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A code issue vulnerability exists in admin/view:modules/loadmodule:usersedit-user=1 in...

Extreme CMS suffers from a file upload vulnerability (CNVD-2020-32535)

Extreme CMS is an open source and free web content management system. Extreme CMS has a file upload vulnerability that can be exploited by an attacker to upload malicious files and gain administrative privileges on the server...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their ability to allow unlimited loading of dangerous types of files, enabling attackers to execute arbitrary code.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows an attacker to execute arbitrary code by downloading a specially created package...

Code injection

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update. This allows an attacker to replace legitimate firmware files with malicious files...

CVE-2020-12046

Opto 22 SoftPAC Project Version 9.6 and prior. SoftPAC’s firmware files’ signatures are not verified upon firmware update. This allows an attacker to replace legitimate firmware files with malicious files...

File upload vulnerability in weiphp backend

WeiPHP is a convenient and scalable open source WeChat public platform development framework, using it you can easily build a own WeChat public platform. weiphp backend file upload vulnerability, attackers can use the vulnerability to upload malicious files, get server privileges...

File upload vulnerability exists in BeyongCms (CNVD-2020-31489)

BeyongCms is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCms. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

BeyongCms suffers from a file upload vulnerability (CNVD-2020-31488)

BeyongCms is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCms. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

File upload vulnerability in imcat

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A file upload vulnerability exists in imcat. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

File Upload Vulnerability in ERP Management Platform of Chengdu Tianwen Internet Technology Co.

Based on software development and technical services, Chengdu Tianwen Interlink Technology Co., Ltd. establishes property ERP application system and provides property management companies with intelligent property management solutions aiming at cost reduction, quality assurance and efficiency...

File upload vulnerability in imcat

Intimate cat imcat is a PHP + MySQL architecture and design of a general-purpose website system, simple, lightweight, practical, sharing, permanent open source free of charge. imcat file upload vulnerability , attackers can exploit the vulnerability to upload malicious files to obtain server...

File Upload Vulnerability in Wecenter of Shenzhen Weike Interactive Co.

WeCenter is an open source knowledge-based social Q&A community program that focuses on organizing, categorizing and retrieving community content and distributing it by connecting to WeChat public platforms, mobile APPs. A file upload vulnerability exists in Shenzhen WeCenter, which can be...

Shenzhen Microcosmos Interactive Limited Wecenter Learning Free Edition has a file upload vulnerability

WeCenter is an open source knowledge-based social Q&A community program that focuses on organizing, categorizing and retrieving community content, and distributing it by connecting to the WeChat public platform and mobile APP. Shenzhen WeCenter has a file upload vulnerability that can be exploite...

WordPress kingof plugin - Fake plugin/backdoor

Fake plugin/backdoor discovered by Sucuri under the name kingof. Solution Delete asap + look up for possible additional malicious files on the server...

WordPress M-Shield plugin - Fake plugin/backdoor

Fake plugin/backdoor discovered by Sucuri under the name M-Shield. Solution Delete asap + look up for possible additional malicious files on the server...

The vulnerability of the WebKit rendering module, related to type conversion errors, allows attackers to execute arbitrary code.

The vulnerability of the WebKit rendering module is related to a type conversion error. Exploiting this vulnerability allows an attacker to execute arbitrary code by opening a specially crafted malicious file or web page...

CVE-2020-11534

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary such as curl or wget and remotely execute code on a victim's server...

CVE-2020-3126 Cisco Webex Meetings Multimedia Viewer Vulnerability

vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections. The vulnerability is due to missing security warning dialog boxes when a room host views shared multimedia files. An authenticated, remote...

CVE-2020-3126 Cisco Webex Meetings Multimedia Viewer Vulnerability

vulnerability within the Multimedia Viewer feature of Cisco Webex Meetings could allow an authenticated, remote attacker to bypass security protections. The vulnerability is due to missing security warning dialog boxes when a room host views shared multimedia files. An authenticated, remote...