DELL EMC NetWorker File Upload Vulnerability

DELL EMC NetWorker is a suite of unified backup and recovery software from Dell DELL USA. The software provides backup and recovery, deduplication elimination, backup reporting, and more. A file upload vulnerability exists in Dell EMC NetWorker, which originates from the fact that an attacker can...

DELL EMC NetWorker 安全漏洞

DELL EMC NetWorker is a suite of unified backup and recovery software from Dell DELL USA. The software provides backup and recovery, deduplication elimination, backup reporting, and more. A file upload vulnerability exists in Dell EMC NetWorker, which originates from the fact that an attacker can...

Command Execution Vulnerability in Cruising Cloud Light Forum System

Cruise Cloud Light Forum System is Java+MySQL architecture, adaptive to cell phones and computers and so on. A command execution vulnerability exists in the Patrol Cloud Light Forum system, which can be exploited by attackers to gain server control privileges...

Apache HTTP Server Path Traversal Vulnerability

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. Apache HTTP Server version 2.4.49 path traversal vulnerability , the vulnerability stems from the introduction of apnormalizepath...

Apache HTTP Server 路径遍历漏洞

Apache HTTP Server is the United States Apache Apache Foundation of an open source web server . The server is fast, reliable and can be expanded through a simple API. Apache HTTP Server version 2.4.49 path traversal vulnerability , the vulnerability stems from the introduction of apnormalizepath...

DEDECMSV6 has a file upload vulnerability (CNVD-2021-75297)

DEDECMSV6 is based on PHP7.x development, is scalable and fully open source.DEDECMSV6 has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in DEDECMSV6 (CNVD-2021-75300)

DEDECMSV6 is based on PHP7.x development, scalable and fully open source.DEDECMSV6 has a command execution vulnerability, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in DEDECMSV6 (CNVD-2021-75295)

DEDECMSV6 is based on PHP7.x development, scalable and fully open source.DEDECMSV6 has a command execution vulnerability, which can be exploited by attackers to gain control of the server...

DEDECMSV6 has a code execution vulnerability

DEDECMSV6 is based on PHP7.x development, is scalable and fully open source.DEDECMSV6 has a code execution vulnerability that can be exploited by attackers to gain control of the server...

Path Traversal in pheditor/pheditor

Description A path traversal attack also known as directory traversal aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash ../” sequences and its variations or by using absolute file paths, it may be...

Path Traversal in dmpop/mejiro

Description A path traversal attack also known as directory traversal aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash ../” sequences and its variations or by using absolute file paths, it may be...

TongWEB application server is vulnerable to arbitrary file upload

TongWEB Application Server is a standard, secure, highly available and feature-rich enterprise application server.TongWEB Application Server is vulnerable to arbitrary file upload, which can be exploited by attackers to upload WEBSHELL and gain control of the server...

Command Execution Vulnerability in NetGuard Security Management Platform of Beijing NetGuard Nebula Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

PublicCMS suffers from a command execution vulnerability (CNVD-2021-70754)

PublicCMS is an open source JAVACMS system developed using the latest mainstream technology in 2021. PublicCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

DEDECMSV6 has command execution vulnerability

DEDECMSV6 is based on PHP7.x development, scalable and fully open source.DEDECMSV6 has a command execution vulnerability, which can be exploited by attackers to gain control of the server...

Tecknodreams SapphireIMS Default Configuration Issue Vulnerability

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A default configuration issue vulnerability exists in Tecknodreams SapphireIMS version 5.0, which stems from the use of default sapphire:ims credentials to connect clients to the...

Command Execution Vulnerability in the Enterprise-Side Internet Integrated Management Platform of Beijing Yahong Century Technology Development Co.

Ltd. is a high-tech company specializing in Internet spatial data governance, network and information security and data value-added solutions and services. A command execution vulnerability exists in the enterprise-side Internet integrated management platform of Beijing Yahong Century Science and...

File Upload Vulnerability in NetSign Signature Verification Server of Dongfang Tongweb Middleware of Beijing Xin'an Century Technology Co.

Ltd. provides signature verification server NetSign to provide digital signature services based on digital certificates for various types of electronic information data, electronic documents, etc., and verify the authenticity and validity of signatures on signed data; support user certificate...

SourceCodester Phone Shop Sales Management System File Upload Vulnerability

SourceCodester Phone Shop Sales Management System is a PHP project called Phone Shop Sales Management System by SourceCodester USA. The project manages phone store sales transactions. A file upload vulnerability exists in SourceCodester Phone Shop Sales Management System, which can be exploited b...

Command Execution Vulnerability in Free Fiction Software

The free novel software is a full range of free listening and reading tools developed by KDDI, focusing on online novel apps. Free Novel Software suffers from a command execution vulnerability that can be exploited by an attacker to gain server control privileges...