CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2021-07539)

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

Veritas Desktop and Laptop Option Access Control Error Vulnerability

Veritas Desktop and Laptop Option is a software from Veritas, USA that provides data backup and endpoint protection features for Windows and Mac desktop and laptop computers. The software supports network-less protection, instant backup, customized failover, self-service restore, and other...

Weak password vulnerability in H3C ERG2-1350W router of Xinhua San Technologies Co.

The H3C ERG2-1350W is a router from Xinhua San Technologies Co. A weak password vulnerability exists in the H3C ERG2-1350W router from Xinhua San Technologies Ltd. that can be exploited by an attacker to obtain sensitive information...

OpenEMR Cross-Site Request Forgery Vulnerability

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site request forgery vulnerability exists in OpenEMR 5.0.2, 6.0.0. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to execute an arbitrary request in...

Huawei Taurus-AL00A Memory Misreference Vulnerability

The Huawei Taurus-AL00A is a smartphone from the Chinese company Huawei Huawei. A memory misreference vulnerability exists in Huawei Taurus-AL00A version 10.0.0.1 C00E1R1P1. The vulnerability arises because a module references freed memory when the program is processing certain messages. An...

Unauthorized Access Vulnerability in Samsung WLAN APs

Samsung China Investment Co., Ltd. was established on March 18, 1996, and its business includes investing in products produced by the enterprise, purchasing machinery and equipment for the enterprise's own use, office equipment, and raw materials, components, and parts needed for production. An...

Hebei Yun in Information Technology Service Co., Ltd. unified identity authentication system there are logical flaws vulnerability

Hebei Yun in Information Technology Service Co., Ltd. was founded in 2014, and is committed to the development of intelligent digital campus products and so on. A logic flaw vulnerability exists in the unified identity authentication system of Hebei Yunzai Information Technology Service Co. Ltd...

Logic flaws in the Shenzhen FEC Chopsticks Cloud Building System.

Shenzhen Chopsticks Cloud Information Technology Co., Ltd formerly Shenzhen Fortune E-commerce Co., Ltd is an Internet+ consulting, technology solution and cloud platform operating company in China. A logic flaw vulnerability exists in the Shenzhen FEC Chopsticks Cloud website building system,...

Denial of Service Vulnerability in WANJUN WJ95-RJ45

WJ95-RJ45 is an IoT and industrial Ethernet acquisition module that realizes the formation of transparent data interaction between sensors and the network. It can forward data from the sensor to the network or forward data from the network to the sensor. A denial of service vulnerability exists i...

Command Execution Vulnerability in ERP-PRO

ERP-PRO is based on the SpringBoot 2.X framework for small and medium-sized enterprises to build open source ERP software. ERP-PRO suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain control of the server...

Weak Password Vulnerability in Ruijie Unified Internet Behavior Management and Auditing System

Ltd. is a company that utilizes new technologies such as cloud computing, SDN, mobile Internet, big data, and Internet of Things to provide end-to-end solutions for users in various industries. A weak password vulnerability exists in the Ruijie Unified Internet Behavior Management and Audit Syste...

SQL Injection Vulnerability in PM2 Project Management Platform of Beijing Bangyong Technology Co.

Ltd. is committed to project management research and development, project management consulting, software development, project management training and education as one of the professional foreign-funded companies. A SQL injection vulnerability exists in the PM2 project management platform of...

Information leakage vulnerability in Cloud SCADA, cloud configuration software of Xiamen Haiwei Technology Co.

Xiamen Haiwei Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production, sales and service. Ltd. Cloud SCADA, a cloud configuration software, has an information leakage vulnerability that can be exploited by attackers to obtain sensitive informati...

Nanjing Jiuzhe Software Technology Co., Ltd. website building system has SQL injection vulnerabilities

JiuZe Technology is a mobile Internet customized software service provider, providing enterprise customers with one-stop mobile Internet solutions from product planning, conceptual design to software delivery, operation and promotion. There is a SQL injection vulnerability in the website building...

blogpost_qiling_dlink_1

It is an offensive tool for exploiting vulnerabilities in software. The repository contains a Python script that exploits a vulnerability in a software product. The script is designed to be used by a penetration tester or a security researcher to test the security of the software. The script uses...

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

PoC exploit for CVE-2020-3452, an unauthorized remote file reading vulnerability in Cisco Adaptive Security Appliance and FTD Software. The exploit uses Shodan to scan for vulnerable targets, then attempts to exploit the vulnerability by sending crafted HTTP requests to the identified targets. Th...

Information Leakage Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. Information leakage vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in Kingdee EAS Cloud

Based on cloud computing technology, Kingdee EAS Cloud provides integrated and intelligent business solutions for large group enterprises. A directory traversal vulnerability exists in Kingdee EAS Cloud, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in MERCURY MR100GP-AC V2.0

MR100GP-AC is an enterprise router from Shenzhen Meike Star Communication Technology Co. A denial of service vulnerability exists in MERCURY MR100GP-AC V2.0, which can be exploited by attackers to cause a denial of service attack...

Denial of Service Vulnerability in ZXHN F4600U at ZTE Corporation

ZTE Corporation is a leading global provider of integrated communications solutions. A denial of service vulnerability exists in the ZXHN F4600U of ZTE Corporation, which can be exploited by attackers to cause a denial of service attack...