Command Execution Vulnerability in JTopCMS Backend of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS back-end command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Code Execution Vulnerability in JTopCMS Backend of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS backend code execution vulnerabilities, attackers can use the vulnerability to obtain control of the Web server...

SolarWinds Orion Bug Allows Easy Remote-Code Execution and Takeover

Three serious vulnerabilities have been found in SolarWinds products: Two in the Orion User Device Tracker and one in the Serv-U FTP for Windows product. The most severe of these could allow trivial remote code execution with high privileges. The SolarWinds Orion platform is the network managemen...

File Upload Vulnerability in seacms v12.5 Backend Management System

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A file upload vulnerability exists in the seacms v12.5 backend management system, which can be exploited by attackers to gain control of the server...

xiycms backend has arbitrary file read vulnerability

xiycms is an open source and free enterprise content management system. xiycms backend has an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read the database configuration file...

Weak password vulnerability in H3C GR2200 routers

The H3C GR2200 router is an enterprise-class router. A weak password vulnerability exists in the H3C GR2200 router. An attacker can exploit this vulnerability to log into the system backend and obtain sensitive information...

Command Execution Vulnerability in Tplay Backend

Tplay is a backend management framework based on ThinkPHP 5.0.13 + layui2.2.45 + Mysql development, PHP version required to upgrade to 5.5. A command execution vulnerability exists in Tplay backend. An attacker can exploit this vulnerability to gain server privileges...

SQL injection vulnerability in SeaCMS backend (CNVD-2021-14497)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

FreeBSD -- Xen guests can triger backend Out Of Memory

Problem Description: Some OSes including Linux, FreeBSD, and NetBSD are processing watch events using a single thread. If the events are received faster than the thread is able to handle, they will get queued. As the queue is unbound, a guest may be able to trigger a OOM in the backend...

Unauthorized Access Vulnerability in JLWCS Backend Management System of Hubei Beijing Lun Group Co.

Hubei Beijing Lun Group Co., Ltd. is a diversified group. An unauthorized access vulnerability exists in the JLWCS back-end management system of Hubei Beijing Lun Group Co. Ltd. that can be exploited by an attacker to add an administrator account...

FreeBSD-SA-21:02.xenoom

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-21:02.xenoom Security Advisory The FreeBSD Project Topic: Xen guests can triger backend Out Of Memory Category: contrib Module: Xen Announced: 2021-01-29...

USN-4707-1: TCMU vulnerability

It was discovered that TCMU lacked a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request...

SQL injection vulnerability in songcms backend (CNVD-2021-12740)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12738)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

Command execution vulnerability in songcms backend (CNVD-2021-12674)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

SQL injection vulnerability in songcms backend (CNVD-2021-12736)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12735)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

SQL injection vulnerability in songcms backend (CNVD-2021-12737)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...

Command Execution Vulnerability in songcms Backend

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A command execution vulnerability exists in the backend of songcms. An attacker can...

SQL injection vulnerability in songcms backend (CNVD-2021-12739)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. SongCMS backend suffers from a sql injection vulnerability. An attacker can exploit this...