Arbitrary File Deletion Vulnerability in DouPHP

DouPHP is a lightweight enterprise website management system based on PHP+Mysql architecture, running on various platforms such as Linux, Windows, MacOSX, Solaris and so on. DouPHP has an arbitrary file deletion vulnerability, which can be exploited by attackers to cause system reinstallation...

Command Execution Vulnerability in S-CMS Enterprise Website Building System (CNVD-2019-29886)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A command execution vulnerability exists in the S-CMS enterprise website builder system. Attackers can use the vulnerability to...

Arbitrary File Deletion Vulnerability in maccms

maccms is a cms website builder. maccms is vulnerable to an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files, resulting in system reinstallation...

Arbitrary File Deletion Vulnerability in Background File List of WMCMS System

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS system background file list exists arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary files, resulting in system reinstallation...

Changzhou Qingzhifeng Network Technology Co., Ltd. website building system has logical flaws and loopholes

Changzhou Qingzhifeng Network Technology Co., Ltd. is engaged in website production, network marketing planning, software development and other services, is Changzhou, Taizhou, Lianyungang, Yangzhou area Baidu marketing service center. Changzhou Qingzhifeng Network Technology Co., Ltd. website...

Arbitrary File Deletion Vulnerability in ECTouch Backend

ECTouch is a mobile mall online store system launched by Shanghai Shangchuang Network Technology Co. ECTouch backend has an arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary files, resulting in system reinstallation...

PHP7CMS foreground exists arbitrary file deletion vulnerability

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS foreground exists arbitrary file deletion vulnerability. Attackers can use the vulnerability to delete arbitrary files, resulting in system...

Arbitrary File Deletion Vulnerability in Background Resource Management of Rookie Article Management System

Rookie Article Management System is a PHP article management system. There is an arbitrary file deletion vulnerability in the background resource management of Rookie Article Management System. An attacker can exploit the vulnerability to delete arbitrary files, resulting in system reinstallation...

Malicious Package

Overview All versions of foever are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation Th...

Malicious Package

Overview All versions of soket.io are considered malicious. The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. When executed, the package calls home to a Command and Control server to execute arbitrary commands. Recommendation...

XIUNOBBS V4.0.4 suffers from a logic flaw vulnerability

Xiuno BBS is an open source lightweight forum system. A logic flaw vulnerability exists in XIUNOBBS V4.0.4 install/index.php. An attacker can exploit this vulnerability to cause a system reinstallation...

Reinstallation Logic Vulnerability in zzcmsV8.0

ZZCMS is a PHP-developed enterprise website builder. A reinstallation logic vulnerability exists in zzcmsV8.0. Due to a logic vulnerability in the judgment of the installation lock file install.lock, an attacker can exploit the vulnerability to reinstall the system and destroy the program...

Arbitrary file deletion vulnerability in SDCMS backend errorcontroller.php page

SDCMS is a website management system managed and developed by Suzhou Smoke & Fire Network Technology Co. SDCMS background errorcontroller.php page exists arbitrary file deletion vulnerability, allowing attackers to exploit the vulnerability to obtain, delete arbitrary files, can lead to system...

Ocean CMS V6.48 File Traversal and Arbitrary File Deletion Vulnerabilities

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS version 6.48 \admin\admintemplate.php page file traversal and arbitrary file deletion vulnerability, allowing attackers to exploit the vulnerability to obtain, delete arbitrary files, can lead to system reinstallation...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Setup Wizard component in the Android operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to require user input for Google accounts after a reboot. This could lead to service interruptions and even cause...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the NVIDIA GPU operating system for Android is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered “critical” due to th...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability in the initial loader of the Qualcomm Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code of a local malicious application within the kernel context. This issue is considered...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability related to privilege escalation in the NVIDIA GPU operating system for Android is linked to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code of a local malware application within the kernel context. This issue is...

Simple-Log Reinstallation Vulnerability

SimpleLog Blog System is a blog system built with PHP+MySQL. A reinstallation vulnerability exists in Simple-Log v1.6, which allows attackers to exploit the vulnerability to reinstall the system, resulting in data loss...

Generic Backdoor Detection (banner check)

The remote service tries to mimic a known service. This is probably a backdoor. In this case, your system may be compromised, and an attacker can control it remotely. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid33951; scriptversion "$Revision: 1.10 $";...