Inogard Ebiz4u Code Execution Vulnerability

Inogard Ebiz4u is an e-procurement system from Inogard Korea. A security vulnerability exists in AxECM.cab ActiveX Control in Inogard Ebiz4u, which stems from a lack of integrity checking in the program. The vulnerability can be exploited to download files and execute code by setting the paramete...

Adobe Illustrator 2020 Memory Corruption Vulnerability (CNVD-2020-25772)

Adobe Illustrator 2020 is one of the world's most recognized vector graphics software designed by Adobe. A memory corruption vulnerability exists in Adobe Illustrator 2020. An attacker can exploit the vulnerability to execute arbitrary code...

Memory corruption vulnerability in XnView Classic jpm file (CNVD-2020-31477)

XnView Classic is an image viewing software. A memory corruption vulnerability exists in the XnView Classic jpm file. An attacker can exploit the vulnerability to execute malicious code on a user's system or cause the program to perform a denial of service...

Command execution vulnerability exists in OpsManage (CNVD-2020-31455)

OpsManage is a management platform for performing device assets, code deployment, application deployment, and scheduled tasks. OpsManage suffers from a command execution vulnerability that can be exploited by an attacker to gain server administrative privileges...

iCATCH DVR Input Validation Error Vulnerability

The iCATCH DVR is a digital video recorder DVR from China Desirable International iCATCH. An input validation error vulnerability exists in the firmware of iCATCH DVR prior to version 20200103, which arises from the program failing to properly validate the parameters of a function. An attacker...

Memory corruption vulnerability exists in WPS Office (CNVD-2020-26321)

WPS Office is the office software produced by Kingsoft Office Software, which can realize the text, forms, presentations and other functions commonly used in office software. WPS Office has a memory corruption vulnerability that can be exploited by attackers to cause the program to crash...

XSS Vulnerability in Construction System of Guangzhou Sanjin Network Technology Co.

Guangzhou Sanjin Network Technology Co., Ltd. is a one-stop provider of Internet application services, providing e-commerce solutions for Chinese enterprises. XSS vulnerability exists in the construction system of Guangzhou Sanjin Network Technology Co. Attackers can utilize the vulnerability to...

File Inclusion Vulnerability in youdianCMS

YouDianCMS is a computer website, mobile website, micro letter, APP, small program in one, sharing space, data automatic synchronization, is the domestic open source five station one excellent solution. youdianCMS there are file containment vulnerabilities, attackers can take advantage of the...

Unspecified vulnerability in Linux kernel (CNVD-2020-24137)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 5.2 powerpc platform. No detailed vulnerability details are provided at this time...

Django Cross-Site Request Forgery Vulnerability (CNVD-2020-29728)

Django is the Django Foundation's set of open source Web application framework based on the Python language . The framework includes object-oriented mapper , view system , template system and so on. A cross-site request forgery vulnerability exists in Django 3.0 and earlier versions, no detailed...

MediaWiki xss vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki versions prior to 1.34.1. The...

Denial of Service Vulnerability in Codesys v3

Codesys is a powerful PLC software programming tool. A denial of service vulnerability exists in Codesys v3, which can be exploited by an attacker to cause a denial of service...

Google Squashes High-Severity Flaws in Chrome Browser

On Thursday, Google released security patches to stomp out high-severity vulnerabilities in its Chrome browser. Patches for all the bugs Google disclosed in its security advisory roll out over the next few days. Overall, eight security bugs were addressed in Chrome browser version 80.0.3987.162 f...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28016)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28018)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

S-CMS suffers from SQL injection vulnerability (CNVD-2020-27168)

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

metasploit-framework

This is the Metasploit Framework repository, a comprehensive collection of exploit modules and tools for penetration testing and vulnerability assessment. The framework is written in Ruby and provides a wide range of features for discovering and exploiting vulnerabilities in various systems and...

Samsung Mobile Device Information Disclosure Vulnerability (CNVD-2020-33795)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An information disclosure vulnerability exists in Samsung mobile devices, which can be exploited by attackers to gain access to cached data...

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-34743)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A buffer overflow vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to execute arbitrary code on the system...

WordPress, Apache Struts Attract the Most Bug Exploits

WordPress and Apache Struts vulnerabilities were the most-targeted by cybercriminals in web and application frameworks in 2019 – while input-validation bugs edged out cross-site scripting XSS as the most-weaponized weakness type. That’s according to the RiskSense Spotlight Report, which analyzed...