Memory corruption vulnerability exists in Yonghong FD100 (CNVD-2020-10237)

YHM Taiwan specializes in the highly functional small, medium and micro PLC market segments. A memory corruption vulnerability exists in the Yonghong FD100, which can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in BeeNet Connect Enterprise Routers

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. An unauthorized access vulnerability exists in BeeNet Internet Enterprise Router, which can be exploited by attackers to...

Trend Micro Security Code Execution Vulnerability

Trend Micro Security is a suite of computer security. A code execution vulnerability exists in Trend Micro Security that can be exploited by an attacker to elevate privileges using a malware program...

Nantong Home Information Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Nantong Home Information Technology Co., Ltd. is a company that provides online platform services. Nantong Home Information Technology Co., Ltd. building system there is SQL injection, attackers can use the vulnerability to obtain sensitive information server...

Microsoft Windows .Group File - Code Execution

Exploit Title: Microsoft Windows .Group File - Code Execution Date: 2020-01-01 Exploit Author: hyp3rlinx Vendor Homepage: www.microsoft.com Version: 1.9.6 Tested on: Windows CVE : N/A + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source:...

Arbitrary File Download Vulnerability in Aifei Routing System

LoveFast Routing System is a DPI-based network management system. There is an arbitrary file download vulnerability in AIFRS, which can be exploited by attackers to download arbitrary files and obtain sensitive information...

Information Disclosure and Denial of Service Vulnerability in Multiple Xiaomi Products

Xiaomi DGNWG03LM and others are products of Xiaomi, a Chinese company.Xiaomi DGNWG03LM is a smart home gateway device.ZNCZ03LM is a smart switch device.MCCGQ01LM is a smart remote control. A security vulnerability exists in multiple Xiaomi products, which stems from a program that does not secure...

Exploit for CVE-2013-0422

K8tools 20191130 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 扫描工具 Ladon 5.7 大型内网渗透扫描神器内置40个功能,支持Cobalt Strike + 扫描工具 K8Cscan5.4 大型内网渗透扫描器内置30个功能,支持Cobalt Strike +...

Silver - Mass Scan IPs For Vulnerable Services

masscan is fast, nmap can fingerprint software and vulners is a huge vulnerability database. Silver is a front-end that allows complete utilization of these programs by parsing data, spawning parallel processes, caching vulnerability data for faster scanning over time and much more. Note: Silver...

http_server path traversal vulnerability (CNVD-2019-46974)

httpserver is an HTTP server utility class. A path traversal vulnerability exists in httpserver. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access location...

Webshell bypass vulnerability in D-Shield firewall (CNVD-2020-04088)

D Shield Firewall is a free IIS firewall software, this software protects websites and servers from intrusion. A webshell bypass vulnerability exists in D-Shield Firewall. An attacker can exploit this vulnerability to gain access to the target server's administrative privileges...

Elephone A4 Access Control Error Vulnerability

Elephone A4 is a smartphone from China's ELEPHONE Communication Technology. An Access Control Error vulnerability exists in the Elephone A4. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles and can be exploited b...

JavaScript Privilege Bypass Vulnerability in Adobe Acrobat and Reader

Adobe Acrobat and Reader are the United States of America Audobee Adobe company's products. The former is a set of PDF file editing and conversion tools, the latter is a set of PDF document reading software. Adobe Acrobat and Reader there is a JavaScript privilege bypass vulnerability, attackers...

SQL Injection Vulnerability in Apple CMS

Apple CMS is a domestic open source PHP station-building system , specializing in Apple CMS movie program , Apple CMS video program , Apple CMS film and television system this piece , with a distinct , in order to be flexible , compact , good compatibility , strong load and so on. Apple CMS SQL...

Sichuan Xinyue Network Information Technology Service Co., Ltd. website building system has SQL injection vulnerabilities

Xinyue Network is engaged in Internet-related business and provides quality customized development services to our clients. Sichuan Xinyue Network Information Technology Service Co., Ltd. station building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtai...

munge elevation of privilege vulnerability

munge is an authentication service for creating and verifying credentials. An elevation of privilege vulnerability exists in munge that can be exploited by an attacker to elevate privileges to root...

Lenovo ThinkPad USB-C Dock Denial of Service Vulnerability

The Lenovo ThinkPad USB-C Dock is an interface docking station from the Chinese company Lenovo Lenovo. A denial of service vulnerability exists in the Lenovo ThinkPad USB-C Dock with firmware version 3.7.2, which can be exploited by attackers to cause a denial of service...

tcpdump buffer overflow vulnerability (CNVD-2019-41918)

tcpdump is a set of sniffing tools from Tcpdump team running under command line. The tool is mainly used for packet analysis and network traffic capture etc. A buffer overflow vulnerability exists in tcpdump. The vulnerability stems from a failure of a network system or product to properly valida...

File Upload Vulnerability in XYHCMS

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

BigTree CMS SQL Injection Vulnerability (CNVD-2019-40510)

BigTree CMS is a small open source cms based on PHP and Mysql. BigTree CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...