totp-rs 安全漏洞

totp-rs is a tool for creating 2FA authentication tokens. A security vulnerability exists in versions of totp-rs prior to 1.1.0 that stems from the creation of 2FA authentication tokens for each time-based one-time password TOTP...

CVE-2021-45005

Artifex MuJS v1.1.3 was discovered to contain a heap buffer overflow which is caused by conflicting JumpList of nested try/finally statements...

ofcms v1.1.4 backend existence of arbitrary file reading vulnerability

OFCMS is a content management system developed based on java technology. OFCMS v1.1.4 there are arbitrary file reading vulnerabilities in the background, the vulnerability stems from the program fails to properly validate the user data, remote attackers can use the vulnerability to read the...

SimpleSAML php Signature Validation Bypass Vulnerability

SimpleSAMLphp is a set of PHP authentication applications that implement the SAML 2.0 service provider and identity provider features . A signature verification bypass vulnerability exists in the SimpleSAMLXMLValidator class in SimpleSAMLphp 1.14.16 and earlier versions using SAML 1.1. An attacke...

Unspecified Vulnerability in Oracle Hospitality Hotel Mobile (CNVD-2017-31691)

Oracle Hospitality Applications is a suite of business applications, servers, and storage solutions for hotel management from Oracle Corporation. The solution provides human resources cost management, provide customer service throughout the journey tracking management to improve customer...

SQL Injection Vulnerability in cid and keyword parameters of KenCMS V1.1 Enterprise Membership Experience Edition System

KenCMS is a content management system. A SQL injection vulnerability exists in the KenCMS V1.1 Enterprise Member Experience system. The lack of filtering of the 'cid' and 'keyword' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the database...

Orthanc DICOM Server Remote Memory Corruption Vulnerability

Orthanc DICOM Server is a DICOM image server that can be used to store all kinds of DICOM image files CT, CR, DR, DX, MR, US... It can be used to store all kinds of DICOM image files CT, CR, DR, MR, US.... Orthanc DICOM Server version 1.1.0 suffers from a remote memory corruption vulnerability th...

UCStats 1.1 SQL Injection

UCStats 1.1 Remote SQL Injection Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ Google Dork: "Powered by UCStats version 1.1" Vulnerability Description: UCStats version 1.1 suffers a remote SQL injection vulnerability in stats.php...