Unauthorized Access Vulnerability in Xiao Xing Look Smart Camera

Xiao Xing Look Smart Camera is an important device under the ZTE Smart Home platform, which can help the owner to realize real-time monitoring of the home situation. Unauthorized access vulnerability exists in Xiao Xing Look Smart Camera, which can be exploited by attackers to obtain sensitive...

XSS Vulnerability in XYHCMS 3.6

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. XYHCMS 3.6 has an XSS vulnerability that can be exploited by attackers to obtain user cookie information...

Code execution vulnerability in XYHCMS backend Fr***.cl***.php file

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system. A code execution vulnerability exists in the XYHCMS backend Fr.cl.php file. Attackers can use this vulnerability to obtain server privileges...

Unauthorized Access Vulnerability in FX Devices of Shenzhen Xingfusion Technology Co.

Shenzhen Xing Fusion Technology Co. was founded in 07, 2018. The company's business scope includes: information technology, computer hardware and software and peripherals, network systems, communication engineering, automotive technology, bioengineering and biological products. An unauthorized...

Yixing Xingsheng Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yixing Xing Sheng Information Technology Co., Ltd. is a collection of network interactive media, planning, consulting, film and television, in one of the new network interactive service providers. Yixing Xing Sheng Information Technology Co., Ltd. station building system SQL injection...

XSS Vulnerability in XYHCMS

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYHCMS has an XSS vulnerability that can be exploited by attackers to obtain administrator cookies...

File Upload Vulnerability in XYHCMS

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

Code Execution Vulnerability in Xingyunhai CMS V3.5

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYH CMS V3.5 code execution vulnerabilities exist. Attackers can use the vulnerability to insert a sentence Trojan horse , to obtain server privileges...

DOM-type cross-site scripting vulnerabilities in the front-end of Xingyunhai CMS (XYHcms)

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. Xing Yunhai CMS XYHcms front-end DOM-type cross-site scripting vulnerabilities. Attackers can use the vulnerability to insert js code in the packet to obtain user cookies and other information...

RHEL 7 : rh-maven35-jackson-databind (RHSA-2018:0342)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0342 advisory. The jackson-databind package provides general data-binding functionality for Jackson, which works on top of Jackson core streaming API...

Arbitrary File Deletion Vulnerability in Xingyunhai CMS v3.5

Xing Yunhai CMS XYHCMS is a completely open source CMS content management system, simple and easy to use. XYHCMS V3.5 version of the existence of arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any file , such as deleting install.lock for CMS reinstallation ...

Arbitrary File Read Vulnerability in Xingyunhai CMS V3.5

Xing Yunhai CMS XYHCMS is a completely open source set of CMS content management system , simple , easy to use. XYHCMS V3.5 version of the existence of arbitrary file reading vulnerability , attackers can use the vulnerability to read any file on the site to obtain sensitive information...

Xing Yunhai CMS (XYHcms) background there are arbitrary file deletion vulnerability

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XingYunHai CMS XYHcms background there are arbitrary file deletion vulnerability, the vulnerability is due to the system fails to correctly filter the parameters submitted by the user . Attackers can use this...

XING Jobs - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application XING Jobs published at the 'play' market has multiple vulnerabilities...

XING - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application XING published at the 'play' market has multiple vulnerabilities...

Wireless Photo Transfer v3.0 iOS - File Include Vulnerability

Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID:...

Wireless Photo Transfer 3.0 iOS - Local File Inclusion

Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID:...

Wireless Photo Transfer v3.0 iOS - File Include Vulnerability

Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-11 Vulnerability Laboratory ID VL-ID:...

Cross site scripting

Cross-site scripting XSS vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the "processing of the buttons of Xing and Pinterest"...