Binary Vulnerability in Mitochrome 2.0

Meitu Look 2.0 is the universal picture viewing software. A binary vulnerability exists in Mito Look 2.0, which can be exploited by an attacker to gain control of a server...

DLL hijacking vulnerability exists in Lovecraft Universal Link PC version (CNVD-2021-03523)

Aqiyi Universal Connections for PC is a local player tool from Aqiyi. There is a DLL hijacking vulnerability in Aqiyi Universal Media Player for PC, which can be exploited by attackers to gain control of the server...

Shenzhen DiYuan Technology Co., Ltd D Shield_Firewall has dll hijacking vulnerability

D ShieldFirewall is an active defense protection software designed for IIS. Ltd. D ShieldFirewall has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03279)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A code execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control of t...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03278)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A command execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control o...

Tencent Conference for Windows suffers from dll hijacking vulnerability

Tencent Meeting is an online video cloud meeting software from Tencent. Tencent Conference for Windows suffers from a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in O2OA Unpacked Overwrite

O2OA is based on J2EE architecture, integrated mobile office, smart office, support for private deployment, adaptive load capacity, can largely save the enterprise software development costs based on the AGPL open source enterprise information technology system requirements of custom development...

File Upload Vulnerability in Website Building System of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. station building system there is a file...

File upload vulnerability exists in super cms (CNVD-2021-03275)

Super CMS is a content management system. A file upload vulnerability exists in super cms, which can be exploited by attackers to gain control of the server...

FasterXML jackson-databind suffers from a command execution vulnerability (CNVD-2021-01852)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A command execution vulnerability exists in FasterXML jackson-databind, which can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in WAC Wireless Controller Software

Sundray WAC is a set of WirelessAccessControl software from Shenzhen Sundray Technology Co. The WAC wireless controller software has a file upload vulnerability that can be exploited by an attacker to upload malicious files to gain server control privileges...

PointShield Cloud Player for windows has a dll hijacking vulnerability

DotShield Cloud Player is a specialized player dedicated to playing DotShield Cloud encrypted videos. PointShield Cloud Player for windows has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01304)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. WPS Office Professional Edition has a memory corruption vulnerability that can be exploited by attacker...

DLL hijacking vulnerability in iTools 4.0 (CNVD-2021-02550)

iTools 4.0 is a multifunctional management tool for Apple devices. A DLL hijacking vulnerability exists in iTools 4.0, which can be exploited by attackers to gain control of the server...

PDF Complete v3.5.310 suffers from a local elevation of privilege vulnerability

PDF Complete is a PDF editor. PDF Complete v3.5.310 suffers from a local elevation of privilege vulnerability that can be exploited by an attacker to gain control of the server...

Walnut Programming - Client Side DLL Hijacking Vulnerability

Walnut Programming is a children's programming education service provider. A DLL hijacking vulnerability exists in the Walnut Programming-Client, which can be exploited by an attacker to gain control of the server...

DLL Hijacking Vulnerability in iTools 3.0

iTools 3.0 is a multifunctional management tool for Apple devices. A DLL hijacking vulnerability exists in iTools 3.0, which can be exploited by attackers to gain control of the server...

Tiger Tooth Live PC Extreme Client suffers from dll hijacking vulnerability

Tiger Tooth Live PC Extreme Client is a game live streaming software. Tiger Tooth Live PC Extreme Client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to gain control of the server...

Command Execution Vulnerability in Cscms

Cheng's CMS-cscms is a diversified content management system, using PHP5+MYSQL as the technical basis for development, using the OOP object-oriented approach to build the basic operational framework. Cscms has a command execution vulnerability that can be exploited by attackers to gain control of...

DLL Hijacking Vulnerability in CyberJournal PC Version

Xunfei Voice Notes is a comprehensive cloud-based note-taking software that focuses on voice input, produced by Xunfei. Xunfei Voice Notes for PC has a DLL hijacking vulnerability, which can be exploited by attackers to gain control of the server...