SQL Injection Vulnerability in Shield Spirit Original Article Submission System 1.0 Backend

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in the backend of Shield Spirit Original Article Submission System 1.0 (CNVD-2020-58381)

Shield Spirit Original Article Submission System 1.0 is a concise submission system. Shield Spirit Original Article Submission System 1.0 has a SQL injection vulnerability in the background, which can be exploited by attackers to obtain sensitive information from the database...

Informatica: ..; bypass leading to tomcat scripts [Unauthenticated]

Hello all Using the technique ..; i was able to bypass the protection mechanism to access Tomcat Example Scripts hosted at https://███/. Steps to reproduce 1 - Open all URL's bellow inside your browser https://█████████/..;/examples/servlets/servlet/SessionExample | Will lead to Session...

CVE-2020-16122

PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured PolicyKit rules this may allow users to install malicious packages...

kernel: vhost-net: stack overflow in get_raw_socket while checking sk_family field

A stack buffer overflow issue was found in the getrawsocket routine of the Host kernel accelerator for virtio net vhost-net driver. It could occur while doing an ictolVHOSTNETSETBACKEND call, and retrieving socket name in a kernel stack variable via getrawsocket. A user able to perform ioctl2 cal...

gd: Double free in the gdImage*Ptr in gd_gif_out.c, gd_jpeg.c, and gd_wbmp.c

The GD Graphics Library aka LibGD 2.2.5 has a double free in the gdImagePtr functions in gdgifout.c, gdjpeg.c, and gdwbmp.c. NOTE: PHP is unaffected...

systemd 239 through 245 accepts any certificate signed by a trusted certificate authority for DNS Over TLS. Server Name Indication (SNI) is not sent and there is no hostname validation with the GnuTLS backend. NOTE: This has been disputed by the developer as not a vulnerability since hostname validation does not have anything to do with this issue (i.e. there is no hostname to be sent)

...

Command Execution Vulnerability in the Backend of Guojiz International Web Site Navigation System

Guojiz International Website Navigation System is developed by ThinkPHP5.0+PHP7.0+Mysql+Apache/Nginx/iis, which is suitable for small and medium-sized webmasters to build a CMS program. Guojiz international web site navigation system backend command execution vulnerability, attackers can use the...

Denial Of Service (DoS)

QEMU is vulnerable to denial of service. A memory leak in hw/9pfs/9p-proxy.c allows local privileged guest OS users to crash the application by via a missing cleanup operation in the proxy backend...

Weak Password Vulnerability in V2.3 Copy Management Server of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd Hikvision Hikvision is a video-centered intelligent IoT solution and big data service provider. A weak password vulnerability exists in the Hikvision Digital Technology Co., Ltd. share management server V2.3, which can be exploited by an attacker to...

File Inclusion Vulnerability in CupCMS Backend

CUPCMS cup content management system integrated video, stars, news, comics, community and other features. A file inclusion vulnerability exists in the CupCMS backend, which can be exploited by attackers to obtain sensitive information...

Helm Injection Vulnerability

helm is a Kubernetes package manager. An injection vulnerability exists in Helm versions prior to 2.16.11 and 3.3.2. The vulnerability stems from a lack of proper validation of user input data by a networked system or product that fails to filter, or fails to correctly filter out, special element...

Logic Flaw Vulnerability in Tanto CMS V1.2

Skyway CMS is a simple website management system. A logic flaw exists in Tanto CMS V1.2, which can be exploited by an attacker to log in to the back-end of a website without an account password...

Nagios XI and Nagios Elevation of Privilege Vulnerabilities

Nagios XI and Nagios are both products of Nagios, Inc.Nagios XI is an IT infrastructure monitoring solution. The solution supports monitoring and alerting of applications, services, operating systems, etc. Nagios is an open source, free network monitoring tool. An elevation of privilege...

There are SQL injection vulnerabilities in the backend of Zendo open source version of Qingdao Yiqi Tianchuang Management Consulting Co.

Zendo Open Source Edition is a research and development project management software. There is a SQL injection vulnerability in the backend of Zendo Open Source Edition of Qingdao Yiqi Tianchuang Management Consulting Co. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2020-15903

An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some included files were editable by nagios user. This issue was fixed in version 5.7.3...

Privilege escalation

An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some included files were editable by nagios user. This issue was fixed in version 5.7.3...

CVE-2020-15903

CVE-2020-15903 concerns Nagios XI prior to 5.7.3, where a privilege escalation exists in backend scripts that run as root and reference included files that were writable by the nagios user. The root cause is improper file permissions in backend components, enabling elevated access. The vulnerabil...

CVE-2020-15903

An issue was found in Nagios XI before 5.7.3. There is a privilege escalation vulnerability in backend scripts that ran as root where some included files were editable by nagios user. This issue was fixed in version 5.7.3...

File Upload Vulnerability in CMS Backend

High Fives CMS is a free database-free CMS system. A file upload vulnerability exists in the backend of High Fives CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...