The vulnerability of the Telerik UI software for ASP.NET AJAX, related to the encryption flaws in RadAsyncUpload, allows attackers to perform arbitrary file uploads or execute arbitrary code.

The vulnerability of the Telerik UI software for ASP.NET AJAX is related to the shortcomings of the RadAsyncUpload encryption mechanism. Exploiting this vulnerability allows a malicious actor to perform arbitrary file uploads or execute arbitrary code...

SQL injection vulnerability in ne***.asp page di*** parameter and pr***.php page di*** parameter of website building system of Shenzhen Dr. Tong Technology Co.

Ltd. is an Internet infrastructure operator engaged in website construction, website optimization and Internet marketing. There is a SQL injection vulnerability in the ne.asp page di parameter and pr.php page di parameter of the website building system of Shenzhen Dr. Tong Technology Co. Ltd. whi...

Unexpected ASP.Net application shutdown after many App_Data file changes occur on a server that is running Windows Server 2012 R2

Unexpected ASP.Net application shutdown after many AppData file changes occur on a server that is running Windows Server 2012 R2 Symptoms Consider the following scenario: You have a server that is running Windows Server 2012 R2. You set up a website on Internet Information Services IIS. You creat...

Command Execution Vulnerability in ZZZCMS

zzcms is a free website builder developed in asp language. ZZZCMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

CVE-2019-15656

D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 are prone to information disclosure via a simple crafted request to index.asp on the web management server because of usernamev and passwordv variables...

PT-2020-4209 · D Link · D-Link Dsl-2875Al +1

Name of the Vulnerable Software and Affected Versions: D-Link DSL-2875AL and DSL-2877AL devices through 1.00.05 Description: The issue is related to information disclosure via a crafted request to "index.asp" on the web management server. This is due to the username v and password v variables. Th...

SQL Injection Vulnerability in pr***.asp System of Ningbo Yilong Computer Technology Co.

Ningbo E-Long Technology Co., Ltd. specializes in the design and construction of corporate website platforms, government schools, home services and other industries. Ltd. station building system pr.asp SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informatio...

The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software allows a hacker to obtain authentication data necessary to access the router administration panel.

The vulnerability of the cgi-bin/index2.asp component of Genexis Platinum-P4410-V2 and Genexis Platinum-4410 routing software is related to authentication deficiencies. Exploiting this vulnerability could allow an attacker to obtain authentication credentials necessary to access the router...

Microsoft ASP.NET Core Denial of Service Vulnerability (CNVD-2020-16652)

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. A denial of service vulnerability exists in Microsoft ASP.NET Core...

The vulnerability of the ASP.NET Core software platform, which arises due to errors in memory object processing, allows attackers to execute arbitrary code.

The vulnerability of the ASP.NET Core software platform exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

dotnet: Memory Corruption in SignalR

A memory corruption flaw was found in ASP.NET core. A client can write to freed memory on the server which could result in undefined behavior. An unauthenticated, remote attacker could exploit this vulnerability to execute arbitrary code by sending specially crafted requests to an ASP.NET Core...

dotnet: Denial of service via backpressure issue

A denial of service flaw was found in ASP.NET Core. An unauthenticated, remote attacker could exploit this vulnerability by sending specially crafted requests to an ASP.NET Core application. The highest threat from this flaw is system availability...

Shell Backdoor List - PHP / ASP Shell Backdoor List

What is a shell backdoor ? A backdoor shell is a malicious piece of code e.g. PHP, Python, Ruby that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own. How to...

CVE-2020-6170

An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI...

Shijiazhuang Jiufan Network Technology Co., Ltd. builds website system pr***.asp page with SQL injection vulnerability

Shijiazhuang Jiufan Network Technology Co., Ltd. is a company focusing on website construction, website optimization and other business. Shijiazhuang Jiufan Network Technology Co., Ltd. building system pr.asp page there is a SQL injection vulnerability, attackers can use the vulnerability to obta...

SQL Injection Vulnerability in in***.asp Page of Fushun Jingwei Website Building System

Fushun Jingwei Network Technology Development Co., Ltd. was founded in 2002, the scope of services covering website construction and promotion, domain name registration, web hosting, graphic and animation design, software development, network and system integration engineering, digital video,...

December 10, 2019-KB4533002 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1903 and Windows Server 1903 RTM and Windows 10, version 1909 and Windows Server, version 1909

None None...

Open Redirect Payload List

Unvalidated redirects and forwards are possible when a web application accepts untrusted input that could cause the web application to redirect the request to a URL contained within untrusted input. By modifying untrusted URL input to a malicious site, an attacker may successfully launch a phishi...

SQL Injection Vulnerability in VANOC Enterprise Website Management System cm***_ba***_mo***.asp Page

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno enterprise website management system cmbamo.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in pr***.asp Page of Yiming Networks Website Builder System

Yiming Networks is an organization engaged in website construction, webpage production, website promotion, domain name registration, web hosting, enterprise mailbox, space rental, and other Internet product-related services. A SQL injection vulnerability exists in the pr.asp page of Yiming's...