Findsploit

It is an offensive tool for searching and exploiting. The primary CVE ID is not explicitly mentioned in the provided context. The tool, Findsploit, is a bash script that searches both local and online exploit databases. It includes three sub-scripts: "compilesploit" to automatically compile and r...

Adobe Magento Cross-Site Request Forgery Vulnerability

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

Zhejiang Mufeng Network Technology Co., Ltd. station building system SQL injection vulnerability

Zhejiang Mufeng Network Technology Co., Ltd. is a website construction, website production, website development, graphic design and other core enterprises. Zhejiang Mufeng Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers t...

Micro Focus Operations Bridge Reporter Remote Code Execution Vulnerability

Micro Focus Operations Bridge Reporter OBR is an IT reporting software that provides resource, event, and response time reports across server, network, and application environments. A remote code execution vulnerability exists in Micro Focus Operations Bridge Reporter version 10.40. An attacker...

NetApp Clustered Data ONTAP Information Disclosure Vulnerability (CNVD-2021-12089)

NetApp Clustered Data ONTAP is NetApp's proprietary operating system for storage disk arrays. An information disclosure vulnerability exists in NetApp Clustered Data ONTAP versions prior to 9.3P20. An attacker can exploit this vulnerability via the AutoSupport bundle to discover node names even i...

Alibaba otter manager distributed database synchronization system suffers from information leakage vulnerability

Alibaba otter manager distributed database synchronization system is based on database incremental log parsing , quasi real-time synchronization to the mysql/oracle database in this server room or off-site server room , a distributed database synchronization system . Alibaba otter manager...

pocsuite_poc_collect

It is an offensive tool for vulnerability exploitation...

QNAP Systems Helpdesk Access Control Error Vulnerability

Qnap Systems QNAP Systems Helpdesk is a helpdesk application from China Wizlink Qnap Systems. An Access Control Error vulnerability exists in QNAP Systems Helpdesk versions prior to 3.0.3, which arises from improper access control and can be exploited by an attacker to gain control of a QNAP devi...

Trend Micro Worry-Free Business Security Access Control Error Vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and e-mail protection. An access control error vulnerability exists in Trend Micro Worry-Free Business...

Information Disclosure Vulnerability in Multiple Huawei Products (CNVD-2021-24919)

Huawei NIP6300 and so on are products of Huawei, China.Huawei NIP6300 is an intrusion prevention system mainly applicable to enterprises, schools, operators, IDC.Huawei NIP6600 is an intrusion prevention system mainly applicable to enterprises, schools, operators, IDC.Huawei Secospace USG6300 is ...

Access Control Error Vulnerability in Multiple Trend Micro Products (CNVD-2021-28311)

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...

IBM API Connect Cross-Site Request Forgery Vulnerability (CNVD-2021-09490)

IBM API Connect is a comprehensive end-to-end API lifecycle solution. A cross-site request forgery vulnerability exists in IBM API Connect 10.0.0.0 - 10.0.1.0, 2018.4.1.0 - 2018.4.1.13. An attacker can exploit this vulnerability to perform malicious and unauthorized actions transmitted from a use...

Denial of Service Vulnerability in Meijer's Meijer App

Midea Home App is the official app of Midea Group for consumers, and it is also the smart home appliance management app based on M-Smart system. A denial of service vulnerability exists in Midea Home App, which can be exploited by attackers to cause the app to stop running...

Information Disclosure Vulnerability in Multiple Trend Micro Products

Trend Micro OfficeScan XG is a suite of distributed anti-virus software.Trend Micro Apex One is a suite of endpoint security software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection...

Unauthorized Access Vulnerability in Beego Framework

beego is an application framework developed in Go. An unauthorized access vulnerability exists in the Beego framework, which can be exploited by an attacker to obtain sensitive information...

IBM Content Navigator Directory Traversal Vulnerability

IBM Content Navigator is a Web client that provides users with a console that enables them to access, manage, and use corporate content anytime, anywhere, from any location in the organization on virtually any mobile device. A directory traversal vulnerability exists in IBM Content Navigator...

Memory Corruption Vulnerability in PM Designer V1.2.98.35 at Pingtone Technology Co.

Ltd. is a professional HMI manufacturer headquartered in Taiwan that integrates R&D, production, manufacturing and sales. A memory corruption vulnerability exists in PM Designer V1.2.98.35 of Pingtone Technology Co. An attacker can exploit this vulnerability to cause the program to crash...

Dell EMC PowerStore Information Disclosure Vulnerability (CNVD-2021-13943)

The Dell EMC PowerStore is a storage device from Dell USA. An information disclosure vulnerability exists in Dell EMC PowerStore versions prior to 1.0.3.0.5.007. The vulnerability stems from the program storing passwords in plaintext. An authenticated, local attacker could exploit the vulnerabili...

Weak Password Vulnerability in Renzi's Network Security Management System

hereinafter referred to as Renzihang was founded in May 2000, and is committed to escorting the network information security of state management organizations, operators, enterprises and institutions, and individuals. A weak password vulnerability exists in Renzihan's network security management...

Weak Password Vulnerability in Mingus Web Application Firewall

Web Application Firewall WAF is a professional application security protection product that focuses on providing security protection for websites, APPs and other web business systems. Weak password vulnerability exists in MingGuard Web Application Firewall, which can be exploited by attackers to...