CVE-2020-6234

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation...

CVE-2020-6224

SAP NetWeaver AS Java HTTP Service, versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker with administrator privileges to access user sensitive data such as passwords in trace files, when the user logs in and sends request with login credentials, leading to Information Disclosure...

Privilege escalation

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation...

CVE-2020-6234

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation...

CVE-2020-6234

SAP Host Agent, version 7.21, allows an attacker with admin privileges to use the operation framework to gain root privileges over the underlying operating system, leading to Privilege Escalation...

Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries. An attacker could then install programs; view, change, or delete data with the logged in user's privileges. To exploit this vulnerability, an attacker would hav...

UQCMS Cloud Business - B2B2C system backend has a logic flaw vulnerability

UQCMS Cloud Business-B2B2C System Multi-merchant e-commerce system is a B2B2C e-commerce software. UQCMS Cloud Merchant-B2B2C System has a logic flaw vulnerability in the background, which can be exploited by an attacker to bypass login privileges for administrator operations...

File Upload Vulnerability in BSPHP-PRO Network Authentication System

BSPHP-PRO is a high performance network verification system. A file upload vulnerability exists in the BSPHP-PRO network authentication system, which can be exploited by an attacker to upload malicious files and gain system administrative privileges...

EyouCms suffers from a file upload vulnerability (CNVD-2020-25554)

EyouCms is a free and open source enterprise content management system based on the TP5.0 framework as the core development. EyouCms file upload vulnerability, attackers can use the vulnerability to upload malicious files to obtain server administrative privileges...

Sensio Labs symfony/security-http authorization issue vulnerability

Sensio Labs Symfony is a free French Sensio Labs , based on the MVC architecture of the PHP development framework . The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . An authorization issue vulnerability exists in Sensio Labs...

Command Execution Vulnerability in Panavision OA e-Office (CNVD-2020-24726)

Panmicro e-office OA system is a professional collaborative OA software for small and medium-sized organizations, a leading brand in the field of domestic collaborative OA office, dedicated to providing professional OA office system, mobile OA applications and other collaborative OA overall...

WL-Enq (WEB Enquete) vulnerable to OS command injection

Overview WL-Enq WEB Enquete provided by WonderLink is a CGI to provide web enquete functions. WL-Enq WEB Enquete contains an OS command injection vulnerability CWE-78. During the meeting of Committee for authorizing the disclosure of unresolved vulnerabilities held on January 16, 2020, it was...

WL Enq Operating System Command Execution Vulnerability

The WonderLink WL-Enq is a CGI Common Gateway Interface that provides network survey functionality. A security vulnerability exists in WonderLink WL-Enq versions 1.11 and 1.12. A remote attacker could exploit the vulnerability to execute arbitrary operating system commands with administrative...

Cache overflow vulnerability in MyVideoConverterPro mo*** module

MyVideoConverter is a video conversion tool that supports the conversion of all video formats on the market and can also perform video splitting, video merging and DVD burning. MyVideoConverterPro mo module suffers from a buffer overflow vulnerability, which can be exploited by an attacker to cau...

Nagios XI - Authenticated Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Nagios XI Authenticated Remote Command Execution', 'Description' = %q This module exploits a vulnerability in Nagios XI before 5.6.6 in order to...

CVE-2020-5342

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

CVE-2020-5342

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

CVE-2020-5342

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run an arbitrary executable with administrative privileges on the affected system...

LJCMS suffers from a file upload vulnerability (CNVD-2020-23004)

LJCMS is an open source enterprise website management system based on PHP+MYSQL. LJCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain administrative privileges of a website...

CVE-2020-6191

SAP Landscape Management, version 3.0, allows an attacker with admin privileges to execute malicious executables with root privileges in SAP Host Agent via SAP Landscape Management due to Missing Input Validation...