RedHat Update for spice RHSA-2016:1205-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: jq

Issue Overview: A heap-based buffer overflow flaw was found in the tokenadd function. By tricking a victim into processing a specially crafted JSON file, an attacker could use this flaw to crash jq or, potentially, execute arbitrary code on the victim's system. CVE-2015-8863 Affected Packages: jq...

Stored Cross-Site Scripting Vulnerability in 78OA Office System

78OA office system is a full-featured OA office system launched by Shenzhen Xinxingkong Software for large and medium-sized enterprises and group enterprises. 78OA office system has a stored cross-site script vulnerability, an attacker can directly insert the cross-site script, and triggered by a...

HP-UX VxFS Unauthorized Access Vulnerability

HP-UX VxFS is a set of commercial logging file software developed by Hewlett-Packard HP that runs on Unix-like operating systems. A security vulnerability exists in the ACL interface of HP-UX VxFS, which can be exploited by a local attacker to gain unauthorized access to a file...

Linux ASLR Disablement Vulnerability

Linux ASLR address space layout randomization is a set of mechanisms for controlling memory address randomization in Linux systems. A security vulnerability exists in the Linux ASLR implementation. An attacker can exploit this vulnerability by setting the RLIMITSTACK resource to 'unlimited' to...

Android system vulnerability to mention the right-vulnerability warning-the black bar safety net

A preamble 1.1 what is the root Root-that is, we here that the system provides the right, typically is for Android system mobile phone, it makes it so that the user can get the Android operating system the super-user permissions. the root is generally used to help users over the phone to...

jcms系统session重置导致getshell

简要描述： 详细说明： jcms系统session重置导致getshell 在/jcms/jcmsfiles/jcms1/web1/site/module/oss/quecode.jsp String sessionId = request.getParameter"sessionid"; 直接通过sessionid获取值 code1.setSessionNamesessionId; 然后又直接设置session 而在我们的jcms中的setup后台管理制作端中又只判断其中cookieusername是否为空 不为空即就登录 可参考如下：...

WinREST Remote Privilege Escalation

So a year back I was massively scanning internet. This case ISPs IPs blocks where you can find easily at RIPE for example. Then I found some interesting hosts where SMB were open and the ACL is totally open to root file system with the same netbios name. All file system is writable. I was able to...

StrongSoft灾害预警系统strFieldName参数SQL注入漏洞

注入链接：/Response/AjaxHandle/AjaxSingleGetReferenceFieldValue.ashx 注入参数：strFieldName 【获取数据库版本】 /Response/AjaxHandle/AjaxSingleGetReferenceFieldValue.ashx?strFieldValue=1&strSelectFieldCollection=1&tableName=sysobjects&strFieldName=convertint,@@version 【管理员账号密码】...

中科新业网络哨兵系统 /manage/include/downfile.php等两处 任意文件下载

No description provided by source...

Harbin Xinzhongxin Campus Card System Arbitrary File Upload Vulnerability

Xinzhongxin Group is a high-tech enterprise integrating independent property right development, intensive production, networked sales, professional service and system integration construction. An arbitrary file upload vulnerability exists in the Harbin Xinzhongxin Campus One Card System, which...

Cisco Firepower 9000 Firepower Extensible Operating System Command Injection Vulnerability

Cisco Firepower Extensible Operating System on Firepower 9000 is a set of operating systems from Cisco that run on 9000 series firewall devices. A security vulnerability exists in the user scripts in the web interface of the Cisco Firepower Extensible Operating System version 1.1 1.160 on Cisco...

Arbitrary File Upload Vulnerability in Panavision OA System

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in Panmicro OA Office System, which can be exploited by an attacker to obtain sensitive information from a website database...

Sensitive Information Leakage Vulnerability in Beijing Melting Point's Video Communication System

Melting Point Netcom Beijing Technology Co., Ltd. is a high-tech company engaged in unified video operation services. The video system is one of the company's systems. A sensitive information disclosure vulnerability exists in the Beijing Melting Point Webcam video system. The vulnerability allow...

Apple iOS CoreText Memory Corruption Vulnerability

Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. A memory corruption vulnerability exists in Apple iOS CoreText, which allows remote attackers to exploit the vulnerability to construct special font files that can be tricked into parsing by the user, whi...

Unauthorized Access Vulnerability in Large Rotating Machinery Online Monitoring and Analysis System of Shenyang Blower Group

Online monitoring and analysis of large rotating machinery is a system for detecting and analyzing the safe and efficient operation of large units and preventing vicious accidents. Shenyang Blower Group unauthorized access vulnerability of large-scale rotating machinery online monitoring and...

Remote Command Execution Vulnerability in LotAPP Application Delivery System of Beijing Huaxia Innovation Technology Co.

Ltd. is a company that applies the delivery of independent intellectual property rights. LotAPP is one of the company's applications. A remote command execution vulnerability exists in the LotAPP application delivery system of Beijing Huaxia Innovation Technology Co. An attacker could exploit the...

Android Broadcast Assembly permission bypass vulnerability-vulnerability warning-the black bar safety net

Lolipop source code has been released some days, I found google in Android 5.0 on the Fix a high risk vulnerability, exploit the vulnerability you can send any broadcast: not only can you send a system protection level of the broadcast, you can also ignore receiver android:exported=false...

Hospira Symbiq Infusion System Unauthorized Access Vulnerability

The Hospira Symbiq Infusion System is an intelligent infusion system from Hospira USA. An unauthorized access vulnerability exists in the Hospira Symbiq Infusion System, which allows remote attackers to bypass restrictions and perform unauthorized operations...

Directory Traversal Vulnerability in ZD WebCC Remote Video Surveillance System

WebCC remote video surveillance system is a video surveillance system of Jinan Zhongwei Century Technology Co. Ltd. A directory traversal vulnerability exists in the WebCC remote video surveillance system. Comprehensive use of the vulnerability, an attacker can use the vulnerability to traverse t...