1931 matches found
CVE-2021-43117
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...
CVE-2021-43117
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...
fastadmin 代码问题漏洞
fastadmin is a set of ThinkPHP and Bootstrap-based web backend development framework. fastadmin has a security vulnerability that stems from the fact that Fastadmin v1.2.1 is affected by a file upload vulnerability that allows execution of arbitrary code via shell access. No details of the...
PT-2021-23747
Name of the Vulnerable Software and Affected Versions fastadmin version 1.2.1 Description The issue allows for arbitrary code execution through shell access due to a file upload vulnerability. Recommendations For fastadmin version 1.2.1, update to a version that fixes the file upload vulnerabilit...
CVE-2021-43117: Unrestricted Upload of File with Dangerous Type
fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...
Victure WR1200信任管理问题漏洞
Victure WR1200 is a router. Victure WR1200 1.0.3 and prior versions are vulnerable to trust management issues, which can be exploited by attackers to gain control of the device via SSH...
CVE-2021-40520
Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials...
CVE-2021-37471
Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...
phpok Arbitrary File Write Vulnerability
phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. An arbitrary file write vulnerability exists in the editsavef function in framework/admin/tplcontrol.php in phpok version 5.1. An attacker can exploit this vulnerability to wri...
CVE-2020-18439
An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...
Design/Logic Flaw
An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...
CVE-2020-18439
An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...
CVE-2020-18439
CVE-2020-18439 affects the PHP-based system phpok (version 5.1). The vulnerability is in the function edit_save_f within framework/admin/tpl_control.php , described across multiple sources as allowing an attacker to write arbitrary files or obtain a shell on the host. Several connected records (e...
YouTube Video Grabber 1.9.9.1 Buffer Overflow
Exploit Title: YouTube Video Grabber 1.9.9.1 - Buffer Overflow SEH Date: 01.11.2021 Software Link: https://www.litexmedia.com/ytgrabber.exe Exploit Author: Achilles Tested Version: 1.9.9.1 Tested on: Windows 7 64bit 1.- Run python code : YouTube.py 2.- Open EVIL.txt and copy All content to...
qinggan phpok 代码问题漏洞
phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. An arbitrary file write vulnerability exists in the editsavef function in framework/admin/tplcontrol.php in phpok version 5.1. An attacker can exploit this vulnerability to wri...
PT-2021-10170
Name of the Vulnerable Software and Affected Versions: qinggan phpok version 5.1 Description: An issue was discovered in the edit save f function in framework/admin/tpl control.php, allowing attackers to write arbitrary files or get a shell. Recommendations: For qinggan phpok version 5.1, conside...
CVE-2020-18439: Undefined Security Weakness
An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...
CVE-2021-31356
A command injection vulnerability in command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability allows an...
Exploit for Incorrect Default Permissions in Vmware Cloud_Foundation
CVE-2022-22948 Information Disclosure in VMWare vCenter -...
CVE-2021-31357
A command injection vulnerability in tcpdump command processing on Juniper Networks Junos OS Evolved allows an attacker with authenticated CLI access to be able to bypass configured access protections to execute arbitrary shell commands within the context of the current user. The vulnerability...