dotnet: ASP.NET Core JWT token logging

ASP.NET Core and Visual Studio Information Disclosure Vulnerability...

dotnet: ASP.NET Core WebSocket frame processing DoS

An infinite loop error was found in ASP.NET when processing WebSocket frames. The exploitation of this issue can cause high CPU resource consumption. The highest threat from this vulnerability is to system availability...

Microsoft Visual Studio和Microsoft .NET Core信息泄露漏洞

Microsoft Visual Studio and Microsoft .NET Core are both products of Microsoft Corporation. Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools that includes most of the tools needed throughout the software lifecycle. Microsoft .NET...

CwCMS suffers from SQL injection vulnerability

CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCMS suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

BlueCMS suffers from SQL injection vulnerability (CNVD-2021-46836)

Bluecms is an asp+access for the development of enterprise website cms. BlueCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

dotnet: ASP.NET Core Client Disconnect Denial of Service

A flaw was found in dotnet. The way client disconnects are handled can allow a remote, unauthenticated attacker to exploit this vulnerability to cause a denial of service against an ASP.NET Core application. The highest threat from this vulnerability is to system availability...

Logic Flaw Vulnerability in ZZCMS Backend

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS back-end logic flaws vulnerabilities. Attackers can use the vulnerability to perform unauthorized...

Code Execution Vulnerability in ZZCMS asp Version

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS asp version of the existence of code execution vulnerabilities , attackers can use the vulnerability to...

CVE-2020-19642

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

Design/Logic Flaw

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

CVE-2020-19642

An issue was discovered in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B. A local attacker can execute arbitrary code via editing the 'recdata.db' file to call a specially crafted GoAhead ASP-file on the SD card...

Logic flaw vulnerability in ZZCMS (CNVD-2021-24717)

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS has a logic flaw vulnerability. Attackers can use this vulnerability to delete any data in the database...

CVE-2021-28141

An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the...

Indiscriminate Exploitation of Microsoft Exchange Servers (CVE-2021-24085)

The following blog post was co-authored by Andrew Christian and Brendan Watters. Beginning Feb. 27, 2021, Rapid7’s Managed Detection and Response MDR team has observed a notable increase in the automated exploitation of vulnerable Microsoft Exchange servers to upload a webshell granting attackers...

Command Execution Vulnerability in XYCMS

XYCMS studio training structure source code is a training organization website source code developed in asp access. XYCMS has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

XYCMS message board has a logic flaw vulnerability

XYCMS message board is to asp access for the development of asp message board source code. XYCMS message board has a logic flaw vulnerability, attackers can use this vulnerability to carry out unlimited number of brute-force attacks...

XYCMS suffers from SQL injection vulnerability (CNVD-2021-17386)

XYCMS is an enterprise building system developed with asp+access. XYCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain database information...

SQL injection vulnerability in the ca***.asp page of the website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. There is a SQL injection vulnerability in the ca.asp page of the website builder system of Ningbo Yilong Computer Technology ...

ZZCMS has a flawed logic vulnerability

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS there exists a logic flaw vulnerability. Attackers can use the vulnerability to reinstall the system...