PT-2023-21333 · Wondershare · Wondershare Anireel

Name of the Vulnerable Software and Affected Versions: Wondershare Anireel version 1.5.4 Description: An issue in Wondershare Anireel allows a remote attacker to execute arbitrary commands via the anireel setup full9589.exe file. Recommendations: For Wondershare Anireel version 1.5.4, consider...

PT-2023-21337 · Wondershare · Wondershare Edraw-Max

Name of the Vulnerable Software and Affected Versions: Wondershare Edraw-max version 12.0.4 Description: An issue in Wondershare Edraw-max allows a remote attacker to execute arbitrary commands via the edraw-max setup full5371.exe file. Recommendations: For version 12.0.4, consider removing or...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare DemoCreator that originates from a command that can be executed remotely via democreatorsetupfull7743.exe...

PT-2023-21336 · Wondershare · Wondershare Pdf Reader

Name of the Vulnerable Software and Affected Versions: Wondershare Technology Co.,Ltd PDF Reader version 1.0.1 Description: An issue in Wondershare Technology Co.,Ltd PDF Reader allows a remote attacker to execute arbitrary commands via the pdfreader setup full13143.exe file. Recommendations: For...

PT-2023-21329 · Wondershare · Democreator

Name of the Vulnerable Software and Affected Versions: Wondershare DemoCreator version 6.0.0 Description: An issue in DemoCreator allows a remote attacker to execute arbitrary commands via the democreator setup full7743.exe file. Recommendations: For version 6.0.0, consider removing or restrictin...

PT-2023-21338 · Wondershare · Creative Center

Name of the Vulnerable Software and Affected Versions: Wondershare Technology Co.,Ltd Creative Centerr version 1.0.8 Description: An issue in the software allows a remote attacker to execute arbitrary commands via the wondershareCC setup full10819.exe file. Recommendations: For version 1.0.8,...

PT-2023-21327 · Wondershare · Wondershare Filmora

Name of the Vulnerable Software and Affected Versions: Wondershare Filmora version 12.0.9 Description: An issue in Wondershare Filmora allows a remote attacker to execute arbitrary commands via the filmora setup full846.exe. Recommendations: For version 12.0.9, consider removing or restricting...

CVE-2023-27767

An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfonesetupfull3360.exe file...

PT-2023-21334 · Wondershare · Wondershare Dr.Fone

Name of the Vulnerable Software and Affected Versions: Wondershare Dr.Fone version 12.4.9 Description: An issue in Wondershare Dr.Fone allows a remote attacker to execute arbitrary commands via the drfone setup full3360.exe file. Recommendations: For version 12.4.9, consider removing or restricti...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare UniConverter that originates from a command that can be executed remotely via uniconverter1464bitsetupfull14204.exe...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Filmora that originates from a command that can be executed remotely via filmorasetupfull846.exe...

Wondershare 代码问题漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare Creative Centerr that originates from a command that can be executed remotely via wondershareCCsetupfull10819.exe...

Amr Ical Events Lists <= 6.6 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Login as Admin. 2. Go to...

CVE-2023-26269

Apache James server version 3.7.3 and earlier provides a JMX management service without authentication by default. This allows privilege escalation by a malicious local user. Administrators are advised to disable JMX, or set up a JMX password. Note that version 3.7.4 onward will set up a JMX...

Product Enquiry for WooCommerce < 2.2.13 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Fedora: Security Advisory for python-flask-restx (FEDORA-2023-354467acba)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Incorrect Authorization in Cacti

Cacti v1.2.22 command injection CVE-2022-46169 vulnerable ap...

Schneider Electric spaceLYnk/homeLYnk Logic Compromise

The vulnerability of the microprogramming software for Schneider Electric’s spaceLYnk and homeLYn logic controllers is related to the lack of protection for operational data. Exploiting this vulnerability allows a remote attacker to compromise the device during the initial setup process...

CVE-2022-3787

A vulnerability was found in the device-mapper-multipath. The device-mapper-multipath allows local users to obtain root access, exploited alone or in conjunction with CVE-2022-41973. Local users that are able to write to UNIX domain sockets can bypass access controls and manipulate the multipath...

CVE-2023-1652

A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem...