CVE-2020-15865

A Remote Code Execution vulnerability in Stimulsoft aka Stimulsoft Reports 2013.1.1600.0 allows an attacker to encode C scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server...

CVE-2020-15865

A Remote Code Execution vulnerability in Stimulsoft aka Stimulsoft Reports 2013.1.1600.0 allows an attacker to encode C scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server...

Remote code execution

A Remote Code Execution vulnerability in Stimulsoft aka Stimulsoft Reports 2013.1.1600.0 allows an attacker to encode C scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server...

Code Execution Vulnerability in ZSITE of Qingdao eEnterprise Tianchuang Management Consulting Co.

ZSITE is an open source free enterprise portal system designed for enterprise marketing. There is a code execution vulnerability in ZSITE, which can be exploited by an attacker to gain control of the web server of Qingdao Yiqi Tianchuang Management Consulting Co...

CloudForms: Out-of-band OS Command Injection through conversion host

An out-of-band OS command injection vulnerability was found in Red Hat CloudForms. An authenticated malicious attacker could execute arbitrary commands on the server by sending a specially crafted request. The highest threat from this vulnerability is to data confidentiality and integrity as well...

CVE-2020-15467

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

Remote code execution

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

CVE-2020-15467

CVE-2020-15467 affects Cohesive Networks vns3:vpn appliances up to and including version 4.11.0; the administrative interface is vulnerable to authenticated remote code execution that can lead to server compromise. CVSSv3.1 base score 8.8 (Network, Low attack complexity, Low privileges required, ...

CVE-2020-15467

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

File Upload Vulnerability in WCMS

WCMS is a CMS turned editorially oriented editor. WCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in SeaCMS (CNVD-2020-48920)

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has a command execution vulnerability that can be exploited by attackers to gain control of a web server...

Arbitrary File Upload Vulnerability in Content Management System of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. is a professional company providing enterprise information construction application and promotion services. The content management system of Nanchang Boran Technology Co., Ltd. suffers from an arbitrary file upload vulnerability, which can be exploited by...

Command Execution Vulnerability in Espcms P8 Backend of Honghu Erchuang Netlink Information Technology Co.

ESPCMS-P8 enterprise station management system using PHP + MySQL development, after 6 generations of development, the current ESPCMS-P8 platform stability and can be developed independently of the maturity of the platform, which supports enterprise news and product releases, talent recruitment,...

WTCMS suffers from a file upload vulnerability (CNVD-2020-47243)

WTCMS is a content management system CMS based on Thinkphp. WTCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

Li Lei's blog suffers from a file upload vulnerability (CNVD-2020-47302)

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in WeiPHP mo***.php File at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP mo.php file has a command execution vulnerability that can be exploited by an attacker to gain control of t...

File Upload Vulnerability in TpFlow Workflow Engine

TpFlow workflow engine is a PHP-based development of the workflow engine . A file upload vulnerability exists in TpFlow Workflow Engine, which can be exploited by an attacker to gain control of a web server...

Li Lei's blog has a file upload vulnerability

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

File inclusion vulnerability in WeiPHP pl***.cl***.php file at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP pl.cl.php file file contains a file inclusion vulnerability that can be exploited by an attacker to gain...

File Upload Vulnerability in Multiple Systems of Anhui KU Aorui Technology Co.

Ltd. is a company dedicated to the development of teaching and management software for universities and colleges, the development of experimental instruments, and the provision of management overall design and solutions for teaching and research institutions. A file upload vulnerability exists in...