GHSA-PGF8-28GG-VPR6 Path traversal

Impact A malicious actor could read sensitive files from the environment where TechDocs documentation is built and published by setting a particular path for docsdir in mkdocs.yml. These files would then be available over the TechDocs backend API. This vulnerability is mitigated by the fact that ...

Command Execution Vulnerability in the Backend of Ruijie Unified Internet Behavior Management and Audit System

Ruijie Unified Internet Behavior Management and Auditing System is an Internet behavior management and auditing product independently developed by Ruijie Networks. A command execution vulnerability exists in the backend of Ruijie Unified Internet Behavior Management and Audit System, which can be...

SQL Injection Vulnerability in Novel House-plus Backend

Novel boutique-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system , built on SpringCloud , using MyBatis as the persistence layer . A SQL injection vulnerability exists in the backend of Novel Boutique-plus. An attacker can exploit the vulnerability to obtai...

File Upload Vulnerability in DedeCMSV6 Backend

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. A file upload vulnerability exists in the DedeCMSV6 backend, which can be exploited by attackers to cause arbitrary code execution...

Command execution vulnerability in the backend of the Guojiz international web site navigation system (CNVD-2021-12801)

Guojiz International Website Navigation System is developed with ThinkPHP5.0 PHP7.0 Mysql Apache/Nginx/iis, a CMS program suitable for small and medium-sized webmasters to build websites. Guojiz international web site navigation system back-end command execution vulnerability, an attacker can use...

CVE-2020-25680

A flaw was found in JBCS httpd in version 2.4.37 SP3, where it uses a back-end worker SSL certificate with the keystore file's ID is 'unknown'. The validation of the certificate whether CN and hostname are matching stopped working and allow connecting to the back-end work. The highest threat from...

File upload vulnerability in duxcms content management system backend (CNVD-2020-68884)

duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. duxcms content management system backend file upload vulnerability, attackers can use the vulnerability to obtain server administrative privileges...

Twitter Hacked in Bitcoin Scam

It started with one weird tweet. Then another. Quickly, some of the most prominent accounts on Twitter were all sending out the same message; I am giving back to the community. All Bitcoin sent to the address below will be sent back double! If you send $1,000, I will send back $2,000. Only doing...

Tic Toc Pwned

We were recently tipped off that the Australian Tic Toc Track watch was almost undoubtedly just a version of the Gator kids GPS tracking watch. That’s the tracker watch which leaked real time kids position data to anyone, it also allowed anyone to silently listen to children through the watch...

Web Application Penetration Testing Tool: Tracy

Tracy is a pentesting tool designed to assist with finding all sinks and sources of a web application and display these results in a digestible manner. tracy should be used during the mapping-the-application phase of the pentest to identify sources of input and their corresponding outputs. tracy...

CVE-2015-1442

CVE-2015-1442 describes a SQL injection in ZeroCMS. Affected: ZeroCMS versions 1.3.3, 1.3.2 and earlier. Vulnerability located in views/zero_transact_user.php (administrative backend) where the user_id parameter in a Modify Account action can be exploited by remote authenticated users to execute ...

Some banks take a number machine,9 0% of the pass to kill the admin backend of location-vulnerability warning-the black bar safety net

Remember that on a year to a row of the check-in card, unintentional click on the logo. Directly BUG stuck on.. Today to the Bank for something, take a number, waiting. It is the shift, few in the check-in staff. Helplessly wait-ing....... Bored on the occasion, will play under the take a number...

TinyShop Sql Injection 1（无视GPC）

简要描述： TinyShop Sql Injection 1（无视GPC） 详细说明： 后台登陆界面存在检查功能，不安全取值导致的SQL注入。 /controller/controllerclass.php public function check $this-safebox = Safebox::getInstance; $this-title='后台登录'; $code = $this-safebox-get$this-captchaKey; if$code != strtolowerReq::args$this-captchaKey $this-msg='验证码错误！';...

Discuz! X2.5 / X3 / X3.1 可CSRF删管理员账号

简要描述： 接着上次的漏洞来…… 详细说明： 上次那个漏洞： WooYun: Discuz! X2.5 / X3 / X3.1中CSRF攻击防御可被绕过 你们回复说是程序员认为不需要校验才这么设置……那这回应该算是你设计问题了吧 后台删除用户页面只是单纯做了submitcheck'submit', 1，按之前的说明，程序这里没有判断formhash，也就是说可以用于CSRF 不过利用这个漏洞前提是要管理员登陆了后台，不过这个不会很麻烦吧（比如故意加点关键字进审核然后让管理员触发神马的，实在不行还能发帖钓鱼） 漏洞证明： 发帖插入 Discuz! 代码：...

CVE-2012-6144

SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 allows remote authenticated backend users to execute arbitrary SQL commands via unspecified vectors...

DEDECMS free account password directly into the background-bug warning-the black bar safety net

As is well known, due to the use of simple, customer base, and more, weaving dreams CMS has been broke manyvulnerabilities. Today xiaobian in the group to get the woven dream official forum, a moderator and reliable message:“DEDECMS explosion serious securityvulnerability, the recent official wil...

GomyeCMS V4. 7 universal login vulnerability-vulnerability warning-the black bar safety net

Author:Zake 2009/10/18 Long time no write technical articles, momentary excitement JJ cocked, so wrote the following article! The author of the program the company website at Preface: Yours truly learning the SQL language is not very long, and if there are what statement to write the wrong heroes...

[Hat-Squad] i-Gallery directory traversal

Hat-Squad Advisory: i-Gallery directory traversal Product: i-Gallery Vendor Url: http://www.b-cp.com Version: 3.3 older versions not tested , but assumed vulnerable Vulnerability: Directory traversal and CSS bug Release Date: Vendor Status: Informed: 15 June 2005 Second Contact: 19 June 2005...

Information disclosure in the back end

More info at https://contao.org/en/security-advisories/information-disclosure-in-the-back-end.html...