YCCMS suffers from a file upload vulnerability (CNVD-2021-37964)

YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

There is a file upload vulnerability in Tianzhi Smart Hospital Integrated Quality Supervision Platform

Shenzhen Qianhai Tianzhi Information Technology Co., Ltd. is a national high-tech enterprise which firstly focuses on the management of hospital grade evaluation and the informationization construction of hospital comprehensive quality supervision platform. A file upload vulnerability exists in t...

File Upload Vulnerability in the Water Resources Project Management System of Siltronic Ltd.

SCT is an information service provider in China, dedicated to the cause of disaster mitigation and benefit reduction, and provides the government with comprehensive solutions for disaster mitigation and benefit reduction informatization. A file upload vulnerability exists in the water project...

File Upload Vulnerability in RG-EG Easy Gateway Web Management System

Ruijie Networks is a specialized network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and more. A file upload vulnerability exists in the web management system of RG-EG Easy Gatewa...

Arbitrary File Upload Vulnerability in Merchant Management System of Xiamen Lionfish Network Technology Co.

Xiamen Lionfish Network Technology Co., Ltd. is a company mainly engaged in other Internet services excluding projects subject to licensing approval; wholesale of electrical equipment; wholesale of computers, software and auxiliary equipment; wholesale of communications and broadcasting and...

File Upload Vulnerability in Open Virtual Simulation Experimental Teaching Management Platform Software of Beijing Runier Network Technology Co.

Beijing Runier Network Technology Co., Ltd. is a national high-tech enterprise registered in Beijing Haidian Cultural and Educational Industrial Park based on virtual simulation technology and network technology, mainly engaged in the research, development, sales, integration and service of...

8x8: Subdomain takeover of ████.jitsi.net

Summary █████.jitsi.net points to an AWS EC2 instance at 18.195.93.116 that no longer exists. I was able to take control of this IP address and run my own EC2 instance. I can now serve content on this domain, obtain a TLS certificate for this domain, etc. If any customers or servers are pointing ...

Command Execution Vulnerability in HIBOS Hotel Broadband Operations System

HiBOS Hotel Broadband Operation System belongs to a set of hotel broadband management system developed by Ammed Century Beijing Technology Co. A command execution vulnerability exists in the HIBOS Hotel Broadband Operation System, which can be exploited by an attacker to gain server control...

File Upload Vulnerability in Online Learning Management System

Online Learning Management System is an online learning management system. A file upload vulnerability exists in Online Learning Management System, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in DHCMS (CNVD-2021-37325)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command execution vulnerability in DHCMS (CNVD-2021-37336)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command execution vulnerability in DHCMS (CNVD-2021-37337)

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in DHCMS

DHCMS is a content management system based on PHP and MySQL. DHCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

File upload vulnerability in travel management system

The Travel Management System is a travel management system that uses C with source code. A file upload vulnerability exists in the Travel Management System that can be exploited by an attacker to gain control of the server...

File upload vulnerability in responsive-ordering-system

responsive-ordering-system online ordering system with POS and kitchen-side user interface. A file upload vulnerability exists in responsive-ordering-system, which can be exploited by an attacker to gain control of the server...

Remote Code Execution Vulnerability in Tianrongxin Intrusion Prevention System

Skyrise Technology Group Skyrise is a provider of network security, big data and cloud services. A remote code execution vulnerability exists in Tianrongxin's intrusion prevention system, which can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in Tianrongxin Access Gateway System (CNVD-2021-37544)

Skyrise Technology Group is a provider of network security, big data and cloud services. A command execution vulnerability exists in the Tianrongxin Access Gateway system, which can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in UFIDA NC (CNVD-2021-36505)

UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a high-end management software product. A command execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in MCms of Jiangxi Minsoft Technology Co. Ltd (CNVD-2021-36509)

MCms is an open source content management system. Ltd. MCms file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...