File upload vulnerability in Joomla! simpleMembership component

Joomla! is an open source content management system CMS, the system provides RSS feeds, site search and other functions. A file upload vulnerability exists in the Joomla! simpleMembership component. An attacker can exploit the vulnerability to upload malicious files and gain server privileges...

Changsha Mito Information Technology Co., Ltd. file upload vulnerability exists in Mito enterprise website building system

Mito enterprise building system is a Changsha Mito Information Technology Co., Ltd. independent research and development of free and open source enterprise-level CMS. A file upload vulnerability exists in the Changsha Mito Information Technology Co., Ltd Mito Enterprise Website System, which can ...

File Upload Vulnerability in Liangjing OA Office System

Good Precision OA Office System is an application system that assists in the daily operation and management of an organization. A file upload vulnerability exists in Lite-On OA Office System, which can be exploited by attackers to upload malicious files and gain administrative privileges on the w...

DouPHP has a file inclusion vulnerability

DouPHP is a lightweight enterprise website management system developed by Zhangzhou Beanshell Network Technology Co. DouPHP has a file inclusion vulnerability, which can be exploited by attackers to execute malicious files and obtain server administrative privileges...

File Upload Vulnerability in Dream CMS

Dream CMS is a free and open source website management system. A file upload vulnerability exists in Dream CMS, which can be exploited by an attacker to upload malicious files and gain administrative privileges on the server...

Cross-Site Request Forgery (CSRF) in tuhinshubhra/extanalysis

Overview The ExtAnalysis project is vulnerable against various CSRFs, that could lead to loss of functionalities and placement of malicious files in arbitrary directories without knowledge of the victim. Proof of Concept Credit: Mik317 1. Download the git project and run the server through the...

Directory traversal

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that...

CVE-2020-3127

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex...

CVE-2020-3128

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex...

Dangerzone Lets You Open Email Attachments Safely

Dangerzone takes potentially malicious files and safely sanitizes them for you...

File Upload Vulnerability in Phpok of Shenzhen Kunshuo Technology Co.

PHPOK system hereinafter referred to as OK system is a content management system for website construction developed by Shenzhen Kunshuo Technology Co., Ltd formerly known as PHPOK Studio, written in PHP, using MySQL database storage by default, and based on the LGPL open-source agreement licensed...

CVE-2020-7252

Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer DXL Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via carefully crafted and named executable files...

CVE-2019-17136

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Trend Micro Anti-Threat Toolkit Arbitrary Code Execution Vulnerability

Trend Micro Anti-Threat Toolkit is a Trend Micro anti-threat toolkit. The Trend Micro Anti-Threat Toolkit contains an arbitrary code execution vulnerability that can be exploited by remote attackers to place malicious files in the same directory as the application, which can be executed in the...

Command Execution Vulnerability in Schneider 500NAC/500NSHAC Building Control System

The Schneider 500NAC/500NSHAC is a building control system from the French company Schneider Electric Schneider Electric. A command execution vulnerability exists in the Schneider 500NAC/500NSHAC building control system that can be exploited by an attacker to upload malicious files...

File Upload Vulnerability in Light Forum System of Roving Cloud

Cruise Cloud Light Forum System is an open source web application based on JAVA + MYSQL architecture, including forums, Q&A modules. Patrol Cloud Light Forum System has a file upload vulnerability that can be exploited by an attacker to upload malicious files and gain access to the site...

Cisco FXOS Software Secure Configuration Bypass (cisco-sa-20190515-nxos-conf-bypass)

According to its self-reported version, Cisco FXOS Software is affected by a configuration bypass vulnerability due to a lack of proper validation of system files when the persistent configuration information is read from the file system. An authenticated, local attacker can exploit this, by...

File Upload Vulnerability in Website Building System of Beijing Tiandi Huada Network Technology Co.

Beijing Tiandihuada Network Technology Co., Ltd. provides comprehensive, thoughtful and professional Internet solutions for enterprises. There is a file upload vulnerability in the website building system of Beijing Tiandi Huada Network Technology Co., Ltd, which can be exploited by attackers to...

File Upload Vulnerability in YiYu CMS

YiYu CMS enterprise building system is developed by php + mysql a set of special for small and medium-sized enterprise website construction of open source cms. YiYu CMS file upload vulnerability , attackers can use the vulnerability to upload malicious files...

The vulnerability of the solr.in.sh component of the Apache Solr search server allows attackers to upload malicious files.

The vulnerability of the solr.in.sh component of the Apache Solr search server is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to upload malicious files through the RMI PORT remotely...