Weak password vulnerability in D-Link AC centralized management platform (CNVD-2021-39061)

Founded in 1986, D-Link is a network solutions provider. A weak password vulnerability exists in the D-Link AC centralized management platform, which can be exploited by attackers to obtain sensitive information...

Information Leakage Vulnerability in Tiandiweiye Easy7 Video Surveillance Platform

TIANDY TIANDY is an Internet of Things IoT enterprise with R&D, production and sales of video surveillance products. An information leakage vulnerability exists in TIANDY Easy7 video surveillance platform, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. An arbitrary file read vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to read arbitrary files...

Information Disclosure Vulnerability in NETGEAR WPN824

The NETGEAR WPN824 is a wireless broadband router. The NETGEAR WPN824 suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

WordPress WPBakery Page Builder Clipboard Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress WPBakery Page Builder Visual Composer...

K8tools

It is an offensive tool for web application exploitation. The repository, K8tools, contains a collection of tools for various purposes, including internal penetration, privilege escalation, remote overflow, vulnerability exploitation, scanning, password cracking, and anti-kill tools. The primary...

CloudBees Jenkins Xcode Integration Plugin XML External Entity Injection Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . CloudBees Jenkins Xcode...

Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2021-49606)

Adobe Animate is a multimedia authoring and computer animation program. Adobe Animate suffers from an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to obtain information...

Denial of Service Vulnerability in D-Link DIR-809 (CNVD-2021-36510)

The D-Link DIR-809 is a wireless router using RTOS. A denial of service vulnerability exists in the D-Link DIR-809, which can be exploited by attackers to cause a denial of service attack...

Information Disclosure Vulnerability in NETGEAR WNDR3300

The NETGEAR WNDR3300 is a wireless router. An information disclosure vulnerability exists in the NETGEAR WNDR3300. An attacker can exploit the vulnerability to obtain sensitive information...

ASUS ZenFone Max Pro (M2) has an information disclosure vulnerability

ASUS ZenFone Max Pro M2 is a smartphone. An information disclosure vulnerability exists in ASUS ZenFone Max Pro M2. An attacker can exploit the vulnerability to listen to the user's calls...

Unauthorized Access Vulnerability in Electro Industries/GaugeTech Total Web Solutions

Electro Industries/GuageTech "EIG USA" is a manufacturer of microprocessor-based digital power meters. An unauthorized access vulnerability exists in Electro Industries/GuageTech Total Web Solutions. An attacker could exploit the vulnerability to obtain sensitive information...

Unauthorized Access Vulnerability in Axis P1354 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis P1354 Network Camera. An attacker could exploit this vulnerability to obtain sensitive information...

Unauthorized Access Vulnerability in Sharp MX-3610N

Sharp is a Japanese electrical and electronics company. An unauthorized access vulnerability exists in Sharp MX-3610N, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in EnGenius EAP1750H

The EAP1750H is a 2.4G and 5G dual-band wireless router from EnGenius. A weak password vulnerability exists in the EnGenius EAP1750H. An attacker can exploit the vulnerability to obtain sensitive information...

Unauthorized Access Vulnerability in Cohu IP Camera Control

Cohu offers the broadest portfolio of equipment and services for back-end semiconductor manufacturing, including one-stop test and handling equipment, thermal subsystems, test contacts, visual inspection and MEMS test solutions. An unauthorized access vulnerability exists in Cohu IP Camera Contro...

Command execution vulnerability in Hurricane CMS (CNVD-2021-35575)

Hurricane CMS is a content management system developed using PHP mysql. Hurricane CMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Denial of Service Vulnerability in SuperE32 L601 RTUs

SuperE32 L601 RTU is an all-in-one RTU from Anchor Technology for SCADA systems. A denial of service vulnerability exists in the SuperE32 L601 RTU, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in Guangzhou Good Intelligence Information Technology Co.

Guangzhou Good Intelligence Information Technology Co., Ltd. business scope: software development; information system integration services; information technology consulting services; data processing and storage services; computer technology development. Guangzhou Good Intelligence Information...

Weak password vulnerability in TRENDnet webcams

TRENDnet is one of the world's leading data networking specialists. A weak password vulnerability exists in TRENDnet webcams, which can be exploited by attackers to obtain sensitive information...