File Upload Vulnerability in Website Building System of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading travel industry chain service provider with high market share in China. There is a file upload vulnerability in the website building system of Beijing Zhongcheng Kexin Technology Development Co., Ltd, which can be exploited by...

Command Execution Vulnerability in Kingsoft V8+ Terminal Security System

Kingsoft V8+ Terminal Security is a security software for enterprise-level users. A command execution vulnerability exists in Kingsoft V8+ Terminal Security System, which can be exploited by attackers to gain control of a server...

MangoTV PC client suffers from dll hijacking vulnerability

Mango TV is a new media audio-visual comprehensive communication service platform with audio-visual interaction as its core, integrating network features and TV features, realizing "multi-screen integration" of exclusive broadcasting, cross-screen and self-producing, and it is also the only...

GBase 8s database suffers from a local boost vulnerability (CNVD-2020-69447)

GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. GBase 8s database has a local privilege vulnerability, which can be exploited by an attacker to gain control of the server...

Sentrifugo Code Issue Vulnerability

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A security vulnerability exists in Sentrifugo version 3.2, which is caused by a user being able to upload images unde...

ZDCC VisualField suffers from localized power lifting vulnerability

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. ZDCC VisualField is vulnerable to a local power lifting vulnerability that can be exploited by an attacker to gain control of the server...

UCMS suffers from a file upload vulnerability (CNVD-2020-69467)

UCMS is a content management system written in PHP. UCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command execution vulnerability in Zendo Enterprise 4.0.3 backend

Zendo Enterprise is a project management software. A command execution vulnerability exists in the backend of Zendo Enterprise Edition 4.0.3, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in LzCMS Content Management System Backend

LzCMS is a blog system developed by ThinkPHP+layui. A file upload vulnerability exists in the background of LzCMS content management system, which can be exploited by attackers to gain control of the web server...

HadSky Light Forum program has a file upload vulnerability

HadSky Light Forum program is a personal original PHP system. The HadSky Light Forum program has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File upload vulnerability in duxcms content management system backend (CNVD-2020-68884)

duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. duxcms content management system backend file upload vulnerability, attackers can use the vulnerability to obtain server administrative privileges...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67388)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from file upload vulnerability (CNVD-2020-67324)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67325)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Zunyi Xintengda Information Technology Co., Ltd. Bole Card Issuing System Basic Edition Arbitrary File Upload Vulnerability

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. Zunyi Xintengda Information Technology Co., Ltd. Bole hair card system basic version of arbitrary file upload vulnerability, an attacker can use the vulnerability on the...

CVE-2020-26820

SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate...

Exploit for CVE-2020-14882

CVE-2020-14882 Oracle WebLogic Server Authentication Bypass -...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

Unauthorized Access Vulnerability in Oracle WebLogic

WebLogic is a Java application server from Oracle Corporation. WebLogic is used to develop, integrate, deploy, and manage large-scale distributed Web applications, web applications, and database applications. An unauthorized access vulnerability exists in Oracle WebLogic, which can be exploited b...

SQL Injection Vulnerability in CupCMS

CupCMS is a content management system that integrates video, stars, news, comics, community and more. CupCMS suffers from a SQL injection vulnerability that can be exploited by attackers to gain control of the server...