EUVD-2019-4123

An issue was discovered in Squid before 4.10. It allows a crafted FTP server to trigger disclosure of sensitive information from heap memory, such as information associated with other users' sessions or non-Squid processes...

CVE-2020-2694

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.18 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

File Upload Vulnerability in vaethink v1.0.1

vaeThink pronounced:v think is a lightweight, high speed PHP content management framework built on ThinkPHP backend and Layui frontend ui. vaethink v1.0.1 has a file upload vulnerability that can be exploited by attackers to gain access to server information and permissions...

File Upload Vulnerability in hybbs v2.3.2

HYBBS is a PHP website program that supports plugin extensions and template extensions. hybbs v2.3.2 has a file upload vulnerability that can be exploited by attackers to obtain web server information and privileges...

File Upload Vulnerability in LeShangShang Mall Open Source System

Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...

File Upload Vulnerability in LeShangShang Mall Open Source System

Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...

File Upload Vulnerability in LeShangShang Mall Open Source System

Good user experience, good stability, scalability and security, can provide mall construction solutions for small and medium-sized sites. Le Shang Mall open source system file upload vulnerability , attackers can use the vulnerability to obtain server information and control permissions...

Command Execution Vulnerability in LJCMS

LJCMS using PHP + Mysql architecture, is a very SEO-friendly, full-featured, safe and stable, support for multi-terminal display and extremely simple to use enterprise station-building system. LJCMS command execution vulnerabilities, attackers can use the vulnerability to obtain server system...

Remote Command Execution Vulnerability in Zendo PMS

Zendo PMS is a set of project management software developed by Easoft Tianchuang in order to solve the chaotic and disorganized phenomenon that occurs in the management process of many enterprises. Zendo PMS has a remote command execution vulnerability that can be exploited by attackers to obtain...

Command Execution Vulnerability in zzcms Website Builder System

zzphp using PHP+mysql/access/sqlite free station building system , all source code open source complete , support for cell phone automatic synchronization . zzcms build website system v1.7.3 there are command execution vulnerabilities , attackers use vulnerabilities to obtain server information...

Code execution vulnerability in rgcms

RuiGu information management system RGCMS is a set of open source station management system , using PHP language , the system features free , extended , extremely fast security , free and open source. rgcms there are code execution vulnerabilities , attackers can exploit vulnerabilities to obtain...

CVE-2019-15032

Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server informatio...

google.com.ar

Pentest notes for: google.com.ar Exploit Pack Nmap 7.80 scan initiated Fri Sep 13 16:38:25 2019 as: "C:\Program Files x86\Nmap\nmap.exe" -sV -A -oA log/google.com.ar google.com.ar Nmap scan report for google.com.ar 173.194.222.94 Host is up 0.015s latency. rDNS record for 173.194.222.94:...

File Upload Vulnerability in Harbin Xinzhongxin Electronic Co.

Harbin Xinzhongxin Electronics Co., Ltd. is a domestic campus card system solution provider, business covers intelligent campus, intelligent transportation, intelligent public security, intelligent park and other related fields. A file upload vulnerability exists in the one-card system of Harbin...

CVE-2019-1224 Remote Desktop Protocol Server Information Disclosure Vulnerability

...

Command execution vulnerability in PbootCMS v1.4.1 frontend search page template

PbootCMS is a new core and permanent open source free PHP enterprise website development and construction management system, is a set of efficient, simple, strong and free commercial PHP CMS source code. PbootCMSv1.4.1 front-end search page templates have a command execution vulnerability that ca...

Remote Code Execution Vulnerability in Advantech WebAccess

Advantech WebAccess/SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. A remote code execution vulnerability exists in Advantech WebAccess, which can be exploited by an attacker to obtain server information and privileges...

Code Execution Vulnerability in OpenSNS V5

OpenSNS is a lightweight social user center framework based on OneThink. The system adheres to a minimalist design style and focuses on communication. A code execution vulnerability exists in OpenSNS, which can be exploited by an attacker to obtain server information...

Command Execution Vulnerability in ctcms 2.0.2 Frontend

Ctcms video system Ctcms video system is a PHP + Mysql development of video management system. ctcms2.0.2 front-end command execution vulnerability, an attacker can exploit the vulnerability to execute arbitrary commands to obtain server information...

Code Execution Vulnerability in ThinkSNS Backend

Wise Software Beijing Co., Ltd. is committed to the wide application of SNS in various business fields, and strives to become a more comprehensive and professional software products and services provider. A code execution vulnerability exists in the backend of ThinkSNS, which allows an attacker t...