995 matches found
Cross site request forgery (csrf)
A cross-site request forgery vulnerability in Jenkins Mantis Plugin 0.26 and earlier allows attackers to connect to an attacker-specified web server using attacker-specified credentials...
D Shield has a webshell bypass vulnerability
D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised with internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain access to the...
D Shield suffers from a webshell bypass vulnerability (CNVD-2020-04311)
D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised with internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain access to the...
Webshell Bypass Vulnerability in Web Security Dog APACHE Edition ( CNVD-2020-04315)
Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...
D Shield suffers from a webshell bypass vulnerability ( CNVD-2020-04312).
D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised with internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain access to the...
Webshell Bypass Vulnerability in Web Security Dog APACHE Edition
Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...
Webshell Bypass Vulnerability in Website Security Dog APACHE Edition (CNVD-2020-04314)
Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...
D Shield suffers from a webshell bypass vulnerability ( CNVD-2020-04310).
D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised with internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to bypass D-Shield and gain access to the...
A file inclusion vulnerability exists in the al*** function ma***_tpl parameter of the Qibo blogging system.
Qibo blog system, Qibo software produced by the multi-user blog system. Qibo blog system al function matpl parameter file containment vulnerability, an attacker can exploit the vulnerability contains malicious files, access to server privileges...
D Shield suffers from a webshell bypass vulnerability (CNVD-2020-02213)
D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability. An attacker can use this vulnerability to bypass the interception of submission...
File upload vulnerability in MyUPB ad***_ic***.php file
MyUPB is a database-free forum that uses text files to store data. A file upload vulnerability exists in the MyUPB adic.php file. This allows an attacker to upload a webshell and gain server privileges...
Sshtunnel - SSH Tunnels To Remote Server
Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py Requirements paramiko Installation sshtunnel is on PyPI, so simply run: pip install sshtunnel or easyinstall sshtunnel or conda install -c...
File Upload Vulnerability in Super CMS Backend
Super CMS Content Management System is a set of products developed to solve the problem of website optimization, it is an open source content management system, the product is based on PHP + MYSQL architecture, and it can run on various platforms such as Windows, Linux, MacOSX, Solaris and so on...
File Upload Vulnerability in Panavision OA Collaboration Office System
Panmicro Collaborative Management Application Platform e-cology is a collaborative business platform with enterprise information portal, knowledge management, data center, workflow management, human resource management, customer and partner management, project management, financial management, an...
CVE-2012-0049
OpenTTD before 1.1.5 contains a Denial of Service slow read attack that prevents users from joining the server...
Webshell bypass vulnerability exists in D Shield (CNVD-2019-43881)
D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability. An attacker can bypass the D-Shield one-sentence Trojan horse and execute...
XML External Entity (XXE)
checkstyle is vulnerable to XML external entity attacks. External DTDs are not disabled by default, allowing an attacker to inject malicious XML to retrieve system files or submit requests on behalf of the server to gain access to the internal network...
GHSA-J52R-XC68-Q8F4 Insufficiently Protected Credentials in Pivotal Reactor Netty
Pivotal Reactor Netty, versions prior to 0.8.11, passes headers through redirects, including authorization ones. A remote unauthenticated malicious user may gain access to credentials for a different server than they have access to...
CVE-2019-2946
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...
SemCms foreign trade website PHP multilingual version v1.0.4 has file upload vulnerability
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website PHP multilingual version v1.0.4 file upload vulnerability. The...