Piwigo suffers from a SQL injection vulnerability

Piwigo is a web-based photo album software from the Piwigo team. Piwigo suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Unauthorized Access Vulnerability in WF2710 of Shenzhen Leike Industrial Co.

The WF2710 is a wireless router. Ltd WF2710 has an unauthorized access vulnerability that can be exploited by an attacker to obtain sensitive information...

Unauthorized Access Vulnerability in Panasonic-WV-SP302 at Panasonic (China) Co.

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. Panasonic-WV-SP302, which can be...

Arbitrary File Read Vulnerability in Deephaven Contact Center Agent Management System

Ltd. is a high-tech enterprise focusing on the research, development, manufacturing and sales of contact center and converged communication products with communication as the core. An arbitrary file read vulnerability exists in the Deephaven Contact Center agent management system, which can be...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33389)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...

D-Link DIR-655 has a weak password vulnerability

The D-Link DIR-655 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-655 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Automox Alive Automox Agent Access Control Error Vulnerability

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. An Access Control Error vulnerability exists in versions prior to Automox Agent 31 that stems from the use of inadequately protected S3 bucket endpoints to store sensitive files, which can be...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33390)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33388)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...

Unauthorized Access Vulnerability in HP Web Web Management System

Hewlett-Packard Trading Shanghai Co., Ltd. was registered on February 8, 1999 in the Market Supervision Administration of the Free Trade Zone. Legal representative Chuang Cheng-Sung Chuang Cheng-Sung, the company's business scope includes computer equipment, printing equipment, imaging equipment,...

Weak Password Vulnerability in TP-LINK TD-8816

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-8816. An attacker could exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Youdot CMS System (CNVD-2021-32482)

Founded in 2012, Changsha Youdot Software Technology Co., Ltd. provides small and medium-sized enterprises SMEs with integrated solutions for website construction, new retail smart stores, micro-sites, micro-malls, live selling, and multi-end mini-programs. A SQL injection vulnerability exists in...

Unauthorized Access Vulnerability in eYou Email System

eYou email system is a powerful email system software with independent intellectual property rights, developed by EYou. An unauthorized access vulnerability exists in the eYou email system, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in ABBYY FineReader PDF 15 for Windows (CNVD-2021-32806)

ABBYY is a leading provider of document conversion, data capture and language software. ABBYY's key areas of research and development include document recognition technology and applied linguistics. ABBYY FineReader PDF 15 for Windows contains a denial of service vulnerability that can be exploit...

Denial of Service Vulnerability in NR286 Router of Shenzhen Leike Industry Co.

Founded in 2000, Shenzhen Leike Industrial Co., Ltd. is one of the leading manufacturers with core technology of intelligent routing and managed switches in China. A denial of service vulnerability exists in the NR286 router of Shenzhen Leike Industry Co. Ltd, which can be exploited by attackers ...

CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)

Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting XSS Date: 2021/03/19 Exploit Author: bt0 Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip Version: 2.2.15 CVE: CVE-2021-28935...

Weak Password Vulnerability in ZXHN E5500 of ZTE CORPORATION

ZXHN E5500 is a router from ZTE Corporation. A weak password vulnerability exists in the ZXHN E5500 of ZTE Corporation, which can be exploited by an attacker to obtain sensitive information...

4 Ways Cyberattackers Hunt for Security Bugs

Blue teamers are in constant battle against hackers — faceless adversaries whose persistence can seem unending. But these actors have processes just like corporate operations, even if theirs are bootlegged. Attackers seek the path of least resistance: Gain access with as little effort as possible...

Command Execution Vulnerability in Integrated Security System of Hangzhou Hikvision Digital Technology Co.

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A command execution vulnerability exists in the integrated security system of Hangzhou Hikvision Digital Technology Co. An attacker can exploit the vulnerability to gain server privileges...

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30877)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: DML component of Oracle MySQL Server 8.0.23 and earlier. An attacker could exploit this vulnerability to affect availability...