S-CMS suffers from SQL injection vulnerability (CNVD-2020-27168)

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

metasploit-framework

This is the Metasploit Framework repository, a comprehensive collection of exploit modules and tools for penetration testing and vulnerability assessment. The framework is written in Ruby and provides a wide range of features for discovering and exploiting vulnerabilities in various systems and...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-33795)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An information disclosure vulnerability exists in Samsung mobile devices, which can be exploited by attackers to gain access to cached data...

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-34743)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A buffer overflow vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to execute arbitrary code on the system...

WordPress, Apache Struts Attract the Most Bug Exploits

WordPress and Apache Struts vulnerabilities were the most-targeted by cybercriminals in web and application frameworks in 2019 – while input-validation bugs edged out cross-site scripting XSS as the most-weaponized weakness type. That’s according to the RiskSense Spotlight Report, which analyzed...

Microsoft Windows GDI Information Leakage Vulnerability (CNVD-2020-18166)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

LiveZilla Live Chat Elevation of Privilege Vulnerability

LiveZilla Live Chat is a free online customer service system from the German company LiveZilla. The system provides real-time monitoring of visitors, offline messages, GeoTracking map tracking, access statistics, online chat and other features. A security vulnerability exists in the 'name' functi...

SQL Injection Vulnerability in Zendo Enterprise Edition

Zendo Enterprise Edition is open source project management software. Zendo Enterprise Edition suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Extreme PDF Reader suffers from a denial of service vulnerability (CNVD-2020-21024)

Extreme PDF Reader is a PDF reader. Extreme PDF Reader has a denial of service vulnerability that can be exploited by attackers to cause the program to crash...

File Upload Vulnerability in S-CMS Enterprise Website Building System (CNVD-2020-21364)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in S-CMS, which can be exploited by an attacker to gain control of the web server...

Android Binder elevation of privilege vulnerability (CNVD-2020-16078)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, and Binder driver is one of the Binder drivers. There is a security vulnerability in Binder in Android. An attacker can exploit the vulnerability to elevate privileges...

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-21996)

Jinwei Intelligent Restaurant System is truly free restaurant management software. Suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, Western food, hot pot restaurant and other kinds of catering business. Jinwei intelligent restaurant SQL injection...

Webshell bypass vulnerability exists in D Shield (CNVD-2020-22802)

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to gain control of the target server...

Hefei Yilang Network Technology Co., Ltd. website building system has logical flaws and vulnerabilities

Hefei Yilang Network Technology Co., Ltd. is a company specializing in Internet technology services, development and application. Hefei a wave of network technology limited company building system there are logical flaws in the vulnerability, the attacker can use the loophole to obtain super...

Universal Password Bypass Vulnerability in KODAK Multimedia Recording and Broadcasting System of Suzhou KODAK Technology Co.

Ltd. is a provider of video and security products and solutions, dedicated to video conferencing, video surveillance and video application solutions to help various government and enterprise customers to solve visual communication and management challenges. Ltd. Kodak multimedia recording system...

HP System Event Utility - Local Privilege Escalation

HP System Event Utility - Local Privilege Escalation Exploit Title: HP System Event Utility - Local Privilege Escalation Author: hyp3rlinx Date: 2020-02-11 Vendor: www.hp.com Link: https://hp-system-event-utility.en.lo4d.com/download CVE: CVE-2019-18915 + Credits: John Page aka hyp3rlinx + Websit...

Buffer Overflow Vulnerability in Multiple Tenda Routers

Tenda AC6 is a 1200M 11ac dual-band wireless router built for home users who are upgrading their broadband and updating their routing.Tenda AC15 is a 1900M wireless router.Tenda AC18 is a wireless router product. A buffer overflow vulnerability exists in multiple Tenda routers. An attacker can...

Google TensorFlow Code Issues Vulnerabilities

TensorFlow is an end-to-end open source platform for machine learning. A code issue vulnerability exists in Google TensorFlow. The vulnerability stems from a networked system or product that does not properly validate incoming data. No details of the vulnerability are provided at this time...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10170)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10169)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...