Dreamline MONXIN has multiple XSS vulnerabilities

Monxin multi-store home mall system is a by Monxin technology to create a PC mall, mobile mall, micro letter mall, offline cash register system. There are multiple XSS vulnerabilities in Monxin. An attacker can exploit this vulnerability to obtain sensitive database information...

Huawei Vicky-AL00A and Victoria-AL00A cell phones isub denial of service vulnerability

The Huawei Vicky-AL00A and Victoria-AL00A are both smartphone devices from the Chinese company Huawei Huawei. A denial of service vulnerability exists in the lsub service in the Huawei Vicky-AL00A Vicky-AL00AC00B157 prior and Victoria-VL00A Victoria-VL00AC00B157 prior, which stems from a program...

Hopesys Web Management System version 1.0 /include/func.common.php referer header injection vulnerability

Hopesys website management system is based on LAMP development of enterprise/government website management system. Hopesys Website Management System version 1.0 /include/func.common.php referer header injection vulnerability. An attacker can use this vulnerability to obtain sensitive database...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-12105)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Broadcom BCM43xx Wi-Fi chips arbitrary code execution vulnerability

The Broadcom BCM43xx Wi-Fi chips are a combo chip for use in 5G Wi-Fi. A security vulnerability exists in the Broadcom BCM43xx Wi-Fi chips that allows remote attackers to exploit the vulnerability to submit a special request to execute arbitrary code...

Net Monitor For Employees Pro Privilege Escalation

Exploit Title: Unquoted Service Path Privilege Escalation - Net Monitor for Employees Pro gmail.com, saeid Nsecurity.org Linkedin: https://www.linkedin.com/in/saeidatabaki Vendor Homepage: http://networklookout.com/ Version: sc qc "Net Monitor for Employees Agent" SC QueryServiceConfig SUCCESS...

Octopus Deploy Authentication Code Execution Vulnerability

Octopus is a deployment tool for .NET automation. An authentication code execution vulnerability exists in Octopus Deploy. Arbitrary code execution occurs due to poor filtering of the program during the authentication process...

Vanno CMS latest version exists to bypass the change of administrative password vulnerability

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno CMS latest version exists to bypass the change admin password vulnerability. Attackers can use this vulnerability to change cookies to enter the background to change the...

Linux kernel local denial of service vulnerability (CNVD-2017-09899)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel suffers from a local denial of service vulnerability. A local attacker could exploit this vulnerability to cause a denial of service...

Dahua Digital Video Recorder and IP Camera Configuration File Password Vulnerability

Dahua DH-IPC-HDBW23A0RN-ZS and others are camera products from DaHua China. A profile password vulnerability exists in a variety of DaHua digital video recorders and IP cameras, which can be exploited by an attacker to impersonate a privileged user and gain access to sensitive information...

Samsung SM-G920F SecEmailSync SQL Injection Vulnerability

The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An SQL injection vulnerability exists in the SecEmailSync plugin in the Samsung SM-G920F build G920FXXU2COH2 version. A remote attacker can...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06319)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Avast Antivirus Security Bypass Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus version 17. The vulnerability can be exploited by an attacker to bypass the Self-Defense feature...

libmad -- multiple vulnerabilities

National Vulnerability Database: CVE-2017-8372: The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file. CVE-2017-8373: The madlayerIII function ...

GnuTLS has multiple vulnerabilities

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A security vulnerability exists in the 'cdkpktread' function in the opencdk/read-packet.c file in...

Adobe Photoshop CC Local Privilege Escalation Vulnerability

Adobe Photoshop PS CC is the latest set of image processing and drawing software from the American company Audobee Adobe. A security vulnerability exists in Adobe PS CC. The vulnerability can be exploited by an attacker to gain privileges...

Adobe Acrobat and Reader Remote Code Execution Vulnerability (CNVD-2017-04980)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A remote code execution vulnerability exists in Adobe Acrobat and Reader. An attacker could use this vulnerability to compromise an affected...

Linux kernel crypto/ahash.c denial of service vulnerability

Linux kernel is an open source operating system. Linux kernel has a security vulnerability in the crypto/ahash.c file. An attacker can exploit the vulnerability to submit a special request to crash the system...

Google Android Qualcomm Audio Driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An elevation of privilege vulnerability exists in Google Android Qualcomm Audio Driver. An attacker can exploit the vulnerability to execute arbitrary code with elevated privileges in the kernel context...

Multiple Huawei Server Design Vulnerabilities

Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A security vulnerability exists in several Huawei servers. An attacker can exploit the vulnerability by guessing the session ID used by another user to access the system with a fake identity...