Lucene search
+L

1393 matches found

CNVD
CNVD
•added 2022/02/14 12:00 a.m.•83 views

Command Execution Vulnerability in Sunflower Personal Edition for Windows at Shanghai Berry Information Technology Co.

Sunflower is a free, all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. Ltd. Sunflower Personal Edition for Windows has a command execution...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2022/02/13 12:00 a.m.•19 views

File Upload Vulnerability in Agricultural Water Pricing Reform System of Siltronic Ltd.

Siltronic is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Agricultural Water Pricing Reform System of Siltronic Technology Limited, which can be exploited by attackers to gain control of the server...

7.4AI score
SaveExploits0
Veracode
Veracode
•added 2022/02/11 7:07 a.m.•40 views

Remote Code Execution (RCE)

topthink/thinkphp is vulnerable to remote code execution. An attacker can obtain server control privileges by injecting a malicious code through the filename function in class.php...

8.8CVSS5AI score0.02021EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/02/11 12:00 a.m.•70 views

GHSA-75JP-87W2-C6X2 ThinkPHP Remote Code Execution (RCE) vulnerability

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS8.8AI score0.02021EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/02/11 12:00 a.m.•34 views

ThinkPHP Remote Code Execution (RCE) vulnerability

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS7.5AI score0.02021EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/02/10 5:15 p.m.•39 views

CVE-2021-44892

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS0.02021EPSS
SaveExploits1References1
OSV
OSV
•added 2022/02/10 5:15 p.m.•37 views

CVE-2021-44892

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS7.5AI score
SaveExploits0References1
Prion
Prion
•added 2022/02/10 5:15 p.m.•36 views

Remote code execution

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

6.5CVSS8.8AI score0.02021EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/02/10 4:05 p.m.•50 views

CVE-2021-44892

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

9.2AI score0.02021EPSS
SaveExploits1References1
CVE
CVE
•added 2022/02/10 4:05 p.m.•182 views

CVE-2021-44892

ThinkPHP 3.x.x is affected by CVE-2021-44892 due to a vulnerability in value[_filename] processed by index.php, enabling a remote attacker to gain server control privileges. Affected component: ThinkPHP 3.x.x (via index.php). Root cause: improper handling of the filename parameter leading to RCE....

8.8CVSS8.8AI score0.02021EPSS
SaveIn wildExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/02/10 12:00 a.m.•16 views

ThinkPHP 安全漏洞

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology Company. A security vulnerability exists in ThinkPHP, which stems from a Remote Code Execution RCE vulnerability in ThinkPHP 3.x. An attacker can exploit this...

8.8CVSS8AI score0.02021EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/10 12:00 a.m.•4 views

CVE-2021-44892: Undefined Security Weakness

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS7.9AI score0.02021EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/31 12:00 a.m.•18 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16622)

Siltronic is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the serv...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2022/01/31 12:00 a.m.•15 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16620)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Siltronic Ltd. that can be exploited by attackers to gain control of the server...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2022/01/31 12:00 a.m.•20 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd.

Siltronic is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the serv...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2022/01/31 12:00 a.m.•23 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16624)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2022/01/31 12:00 a.m.•18 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Technology Limited (CNVD-2022-16623)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2022/01/31 12:00 a.m.•23 views

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16625)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2022/01/27 12:00 a.m.•148 views

Command Execution Vulnerability in TongWeb Management Console (CNVD-2022-16268)

TongWeb is an application server from Beijing Orientop Technology Co. A command execution vulnerability exists in the TongWeb management console that can be exploited by an attacker to gain server control privileges...

7.5AI score
SaveExploits0
CNNVD
CNNVD
•added 2022/01/26 12:00 a.m.•20 views

Gerapy 命令注入漏洞

Gerapy is a crawler framework based on the Scrapy Scrapyd Scrapyd Client Scrapyd API Django. Gerapy authenticates remote command execution vulnerabilities, which can be exploited by attackers to gain control of the server...

9CVSS5.8AI score0.0765EPSS
SaveExploits1References6
Rows per page
Query Builder