1006 matches found
Arbitrary File Deletion Vulnerability in Bacardi CMS Microstore
Bacardi CMS MicroMall is a free and open source object-oriented multi-store multi-user micro-mall PHP development framework. Hundred CMS Micro Mall arbitrary file deletion vulnerability exists. An attacker can use this vulnerability to delete arbitrary files on the server without logging in...
appcms V2.0 has an arbitrary file read vulnerability
appcms is a professional APP content management system that provides various extension modules, such as information, recommended positions, topics, friendly links, body internal links, etc., to help webmasters better personalize their websites. appcms V2.0 has an arbitrary file reading...
Hotfix XS82E002 - For Citrix Hypervisor 8.2
Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| Restart the XAPI Toolstack Content live patchable| No Baselines for Live Patch| N/A Revision History|...
XML External Entity (XXE)
Nokogiri is vulnerable to XML external entity XXE attack. The vulnerability exist as the external DTDs are enabled by default in the XML parser, which would allow an attacker to submit requests on behalf of the server and gain access to internal and local resources...
Dark Web Pricing Skyrockets for Microsoft RDP Servers, Payment-Card Data
Cybercriminals are vying for Remote Desktop Protocol RDP access, stolen payment cards and DDoS-for-Hire services, based on a recent analysis of underground marketplace pricing. During the COVID-19 pandemic, cybercriminals have profited with “increasingly advantageous positions to benefit from the...
Uc365 site navigation open source version of da***.php file file upload vulnerability
Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of da.php file file upload vulnerability . Attackers can use the vulnerability to upload...
CVE-2020-26255
Kirby is a CMS. In Kirby CMS getkirby/cms before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full access to the Kirby Panel can upload a PHP .phar file and execute it on the server. This vulnerability is critical if you might have potential attackers in your group of...
Code injection
Kirby is a CMS. In Kirby CMS getkirby/cms before version 3.4.5, and Kirby Panel before version 2.5.14 , an editor with full access to the Kirby Panel can upload a PHP .phar file and execute it on the server. This vulnerability is critical if you might have potential attackers in your group of...
CVE-2020-26255
CVE-2020-26255 affects Kirby CMS (getkirby/cms) before 3.4.5 and Kirby Panel before 2.5.14. A user with full access to Kirby Panel can upload a PHP Phar file and execute it on the server, enabling code execution. The vulnerability is reported as critical when authenticated Panel users may exist; ...
GHSA-G3H8-CG9X-47QW Kirby Panel users could upload PHP Phar archives as content files before v2.5.14 and v3.4.5
Impact An editor with full access to the Kirby Panel can upload a PHP .phar file and execute it on the server. This vulnerability is critical if you might have potential attackers in your group of authenticated Panel users, as they can gain access to the server with such a Phar file. Visitors...
The vulnerability of Cisco Webex Meetings Server and Cisco Webex Meetings software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the software user interfaces for Cisco Webex Meetings Server and Cisco Webex Meetings is related to improper access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
File upload vulnerability in DedeCMSV6 backend fi***_na***_co***.php file
DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A file upload vulnerability exists in the DedeCMSV6 backend finaco.php file. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...
Tencent Video (Windows Client) DLL Hijacking Vulnerability
Tencent video official free download is the client product of Tencent video, supporting rich content online VOD and live TV stations, providing list management, video volume amplification, color and picture quality adjustment, automatic shutdown and other more powerful features and services...
File Upload Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A file upload vulnerability exists in the DSS Safe City...
Arbitrary File Upload Vulnerability in PowerCreator CMS
PowerCreator, founded in 2003, is an international enterprise providing software development and product manufacturing for the global audio/video industry. An arbitrary file upload vulnerability exists in PowerCreator CMS. An attacker can exploit this vulnerability to upload a webshell and gain...
Design/Logic Flaw
In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API...
Wordpress EZ-done File Manager Remote File Upload Vulnerability
WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A remote file upload vulnerability exists in Wordpress EZ-done File Manager. An attacker ca...
WordPress plugin Simple File List arbitrary file upload vulnerability
WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. An arbitrary file upload vulnerability exists in the WordPress plugin Simple File List. An...
