Command injection

Command injection vulnerability in Manual Ping Form Web UI in Shenzhen Ejoin Information Technology Co., Ltd. ACOM508/ACOM516/ACOM532 609-915-041-100-020 allows a remote attacker to inject arbitrary code via the field...

CVE-2022-23332

CVE-2022-23332 is a command-injection vulnerability in the Manual Ping Form (Web UI) of Shenzhen Ejoin Information Technology Co., Ltd. for ACOM508/ACOM516/ACOM532 devices (version 609-915-041-100-020). The flaw allows a remote attacker to inject arbitrary code via a field in the Web UI’s Manual ...

Unrestricted file upload

Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0 has a file upload vulnerability, which can be exploited by an attacker to gain control of the server...

Privilege escalation

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server...

CVE-2022-28120

The CVE-2022-28120 entry concerns Beijing Runnier Network Technology Co., Ltd Open virtual simulation experiment teaching management platform software 2.0. A vulnerability in the file upload feature allows an attacker to gain control of the server. The root cause is described in connected sources...

CVE-2022-28606

The CVE-2022-28606 entry describes an arbitrary file upload vulnerability in BossCMS 1.0 from Wenzhou Huoyin Information Technology Co. The flaw allows an attacker to upload files to the server and potentially gain control of the server. No concrete remediation details are provided in the connect...

CVE-2022-28606

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server...

Tenda HG6 3.3.0 Remote Command Injection Vulnerability

Tenda HG6 version 3.3.0 suffers from a remote command injection vulnerability. It can be exploited to inject and execute arbitrary shell commands through the pingAddr and traceAddr HTTP POST parameters in formPing, formPing6, formTracert and formTracert6 interfaces. Tenda HG6 v3.3.0 Remote Comman...

Tenda HG6 3.3.0 Remote Command Injection

Tenda HG6 v3.3.0 Remote Command Injection Vulnerability Vendor: Tenda Technology Co.,Ltd. Product web page: https://www.tendacn.com https://www.tendacn.com/product/HG6.html Affected version: Firmware version: 3.3.0-210926 Software version: v1.1.0 Hardware Version: v1.0 Check Version:...

Tenda HG6 v3.3.0 Remote Command Injection Vulnerability

Summary HG6 is an intelligent routing passive optical network terminal in Tenda FTTH solution. HG6 provides 4 LAN ports1GE,3FE, a voice port to meet users' requirements for enjoying the Internet, HD IPTV and VoIP multi-service applications. Description The application suffers from an authenticate...

Arbitrary File Read Vulnerability in e-office of Shanghai Panavision Network Technology Co. Ltd (CNVD-2022-43244)

e-office is a standard collaborative mobile office platform. Ltd. e-office has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in e-office of Shanghai Panavision Network Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in e-office of Shanghai Panmicro Network Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-22253

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E50H10LS39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim devic...

CVE-2020-22253

CVE-2020-22253 affects Xiongmai Technology Co devices including AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E_50H10L_S39. The root cause described across sources is an open port 9530 on these devices, which allows unauthentica...

CVE-2020-22253

Xiongmai Technology Co devices AHB7008T-MH-V2, AHB7804R-ELS, AHB7804R-MH-V2, AHB7808R-MS-V2, AHB7808R-MS, AHB7808T-MS-V2, AHB7804R-LMS, and HI3518E50H10LS39 were all discovered to have port 9530 open which allows unauthenticated attackers to make arbitrary Telnet connections with the victim devic...

File Upload Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co.

BossCMS is a safe, stable, good, permanent free open source, independent research and development of PHP framework for enterprise building system. Wenzhou Huanxin Information Technology Co., Ltd. BossCMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the...

Arbitrary File Deletion Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co., Ltd (CNVD-2022-42448)

BossCMS is a content management system developed by Wenzhou Huyin Information Technology Co., Ltd. based on self-developed PHP framework MySQL architecture. Ltd. BossCMS has an arbitrary file deletion vulnerability, which can be exploited to delete arbitrary files on the server...

SQL Injection Vulnerability in Website Building System of Siltronic Technology Limited (CNVD-2022-25679)

Siltronic is a company dedicated to the cause of disaster prevention and mitigation in China, providing the government with comprehensive solutions for disaster prevention and mitigation informatization. A SQL injection vulnerability exists in the website builder system of Siltronic Technology...

File Upload Vulnerability in BossCMS

BossCMS is a content management system based on self-developed PHP framework MySQL architecture developed by Wenzhou Huyin Information Technology Co. A file upload vulnerability exists in BossCMS, which can be exploited by attackers to gain control of the server...