CVE-2021-2135

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Coherence Container. Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to...

CVE-2021-2136

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise...

Oracle Fusion Middleware 安全漏洞

Oracle WebLogic Server is a cloud-native, enterprise-grade Java platform application server for multi-tier distributed enterprise application development and deployment. A security vulnerability exists in the Coherence Container component in Oracle WebLogic Server versions 12.1.3.0.0, 12.2.1.3.0,...

Path Traversal in mailtrain-org/mailtrain

✍️ Description A path traversal also known as directory traversal is a web security vulnerability that allows an attacker to read arbitrary files on the server that is running an application. This might include application code and data, credentials for back-end systems, and sensitive operating...

Exploit for CVE-2020-14882

CVE-2020-14882 CVE-2020-14882 Description Vulnerability...

Sourcecodester Baby Care System 代码问题漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. It provides a baby care system. Sourcecodester Baby Care System is vulnerable to a file upload vulnerability that could be exploited by an attacker to cause execution of commands and gain contr...

Wordpress Plugin Contact Form 7 5.3.1 - Unrestricted File Upload

Exploit Title: Wordpress Plugin Contact Form 7 5.3.1 - Unrestricted File Upload Date: 12/20/2020 Exploit Author: Ramón Vila Ferreres @ramonvfer Vendor Homepage: https://contactform7.com Software Link: https://wordpress.org/plugins/contact-form-7/ Version: 5.3.1 and below Tested on: Windows 10 190...

WordPress Contact Form 7 5.3.1 Shell Upload

Exploit Title: Wordpress Plugin Contact Form 7 5.3.1 - Unrestricted File Upload Date: 12/20/2020 Exploit Author: Ramón Vila Ferreres @ramonvfer Vendor Homepage: https://contactform7.com Software Link: https://wordpress.org/plugins/contact-form-7/ Version: 5.3.1 and below Tested on: Windows 10 190...

mysql: Server: Parser unspecified vulnerability (CPU Apr 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Parser. Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

File Upload Vulnerability in Coolweather Typo Detection System

CoolWeather Typo Detection System is a typo detection system for government websites, which is able to detect typos on government website pages. A file upload vulnerability exists in CoolWeaver Typo Detection System, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in ZZCMS 2020 Frontend

ZZCMS is a content management system. A command execution vulnerability exists in the ZZCMS 2020 frontend, which can be exploited by an attacker to gain control of the server...

Sentrifugo Code Issue Vulnerability (CNVD-2020-66085)

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A code issue vulnerability exists in Sentrifugo version 3.2, which stems from a user being able to upload attachments...

Command Execution Vulnerability in ZZCMS (CNVD-2020-69516)

ZZCMS is a content management system. ZZCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

File upload vulnerability in Mu Feng CMS of Shijiazhuang Jiesou Network Technology Co.(CNVD-2020-68885)

Mu Feng CMS is Shijiazhuang JieSuo network 202 years launched a newest use of think PHP framework of the website background management system. A file upload vulnerability exists in Shijiazhuang Jiesou Network Technology Co. An attacker can exploit this vulnerability to gain control of the web...

CMSuno Code Injection Vulnerability (CNVD-2020-63993)

CMSUno is an easy and handy tool for creating one-page responsive websites. A code injection vulnerability exists in CMSuno 1.6.2. This vulnerability can be exploited to inject malicious code into the "lang" parameter of /uno/central.php and run this PHP code in a web page to take over control of...

CVE-2020-25538

CMSUno 1.6.2 contains CVE-2020-25538: an authenticated attacker can inject malicious code into the lang parameter of /uno/central.php, causing PHP code execution in the web page and potentially taking over the server. This is a documented remote code execution vulnerability affecting CMSUno 1.6.2...

CVE-2020-25538

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server...

CVE-2020-25538

An authenticated attacker can inject malicious code into “lang” parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server. Recent assessments: noraj at May 08, 2021 7:39pm UTC reported: Be careful it...

CVE-2020-25538: Improper Control of Generation of Code

An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the control of the server...

Kaixin Electronic Document Inventory in File Upload Vulnerability

Qixing electronic document library can be used to store departmental manuals, system specifications, mechanical drawings and other edoc. The Qixing Electronic Document Library suffers from a file upload vulnerability, which can be exploited by an attacker to upload a malicious file and take contr...