DEDECMSV6 has a file upload vulnerability (CNVD-2021-75297)

DEDECMSV6 is based on PHP7.x development, is scalable and fully open source.DEDECMSV6 has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in DEDECMSV6 (CNVD-2021-75300)

DEDECMSV6 is based on PHP7.x development, scalable and fully open source.DEDECMSV6 has a command execution vulnerability, which can be exploited by attackers to gain control of the server...

DEDECMSV6 has a code execution vulnerability

DEDECMSV6 is based on PHP7.x development, is scalable and fully open source.DEDECMSV6 has a code execution vulnerability that can be exploited by attackers to gain control of the server...

Path Traversal in pheditor/pheditor

Description A path traversal attack also known as directory traversal aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash ../” sequences and its variations or by using absolute file paths, it may be...

Path Traversal in dmpop/mejiro

Description A path traversal attack also known as directory traversal aims to access files and directories that are stored outside the web root folder. By manipulating variables that reference files with “dot-dot-slash ../” sequences and its variations or by using absolute file paths, it may be...

TongWEB application server is vulnerable to arbitrary file upload

TongWEB Application Server is a standard, secure, highly available and feature-rich enterprise application server.TongWEB Application Server is vulnerable to arbitrary file upload, which can be exploited by attackers to upload WEBSHELL and gain control of the server...

Command Execution Vulnerability in NetGuard Security Management Platform of Beijing NetGuard Nebula Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

PublicCMS suffers from a command execution vulnerability (CNVD-2021-70754)

PublicCMS is an open source JAVACMS system developed using the latest mainstream technology in 2021. PublicCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

DEDECMSV6 has command execution vulnerability

DEDECMSV6 is based on PHP7.x development, scalable and fully open source.DEDECMSV6 has a command execution vulnerability, which can be exploited by attackers to gain control of the server...

Tecknodreams SapphireIMS Default Configuration Issue Vulnerability

Tecknodreams SapphireIMS is an ITIL 2011 certified enterprise class service management system from Tecknodreams India. A default configuration issue vulnerability exists in Tecknodreams SapphireIMS version 5.0, which stems from the use of default sapphire:ims credentials to connect clients to the...

Command Execution Vulnerability in the Enterprise-Side Internet Integrated Management Platform of Beijing Yahong Century Technology Development Co.

Ltd. is a high-tech company specializing in Internet spatial data governance, network and information security and data value-added solutions and services. A command execution vulnerability exists in the enterprise-side Internet integrated management platform of Beijing Yahong Century Science and...

File Upload Vulnerability in NetSign Signature Verification Server of Dongfang Tongweb Middleware of Beijing Xin'an Century Technology Co.

Ltd. provides signature verification server NetSign to provide digital signature services based on digital certificates for various types of electronic information data, electronic documents, etc., and verify the authenticity and validity of signatures on signed data; support user certificate...

SourceCodester Phone Shop Sales Management System File Upload Vulnerability

SourceCodester Phone Shop Sales Management System is a PHP project called Phone Shop Sales Management System by SourceCodester USA. The project manages phone store sales transactions. A file upload vulnerability exists in SourceCodester Phone Shop Sales Management System, which can be exploited b...

Command Execution Vulnerability in Free Fiction Software

The free novel software is a full range of free listening and reading tools developed by KDDI, focusing on online novel apps. Free Novel Software suffers from a command execution vulnerability that can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in Skymirror Vulnerability Scan and Management System

Skymirror Vulnerability Scan and Management System is a vulnerability scanning product developed by Qisda, a network-based vulnerability analysis, assessment and management system. Sky Mirror Vulnerability Scan and Management System has a command execution vulnerability, which can be exploited by...

Mozilla VPN 安全特征问题漏洞

Mozilla VPN is an open source virtual private network Web browser extension, desktop application and mobile application from the Mozilla Foundation in the U.S. A security vulnerability exists in versions of Mozilla VPN prior to 2.3. An attacker could exploit the vulnerability to gain control of t...

Command Execution Vulnerability in Ruijie NBR Routers (CNVD-2021-58700)

Ltd. is a professional network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, etc. A command execution vulnerability exists in Ruijie NBR routers, which can be exploited by attackers...

Xerox Phaser 4622 Printer Has Stack Overflow Vulnerability

The Xerox Phaser 4622 printer is a multifunction all-in-one printer that uses the RTOS operating system. The Xerox Phaser 4622 Printer suffers from a stack overflow vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in MacCMS

MacCMS is a rapid site building system that runs on a PHP MYSQL environment. MacCMS has a command execution vulnerability that can be exploited by attackers to gain control of the server...

Zhejiang Unicom APP has logic flaw vulnerability

Zhejiang Unicom mobile client is a communication service app software. The software serves for the exchange and communication between the company and its customers, allowing users to check their Internet traffic and package usage at any time. Zhejiang Unicom APP has a logic flaw vulnerability,...