Command Execution Vulnerability in imcat Backend

imcat is a PHP-based open source website building system . imcat backend there is a command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Pinger 1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Title: Pinger 1.0 - Remote Code Execution Author: Milad Karimi Vendor Homepage: https://github.com/wcchandler/pinger Software Link: https://github.com/wcchandler/pinger Tested on: windows 10 , firefox Version: 1.0 CVE : N/A...

Pinger 1.0 - Remote Code Execution

Title: Pinger 1.0 - Remote Code Execution Date: 2020-04-13 Author: Milad Karimi Vendor Homepage: https://github.com/wcchandler/pinger Software Link: https://github.com/wcchandler/pinger Tested on: windows 10 , firefox Version: 1.0 CVE : N/A...

DEBIAN-CVE-2020-11743

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOPmapgrant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to retur...

DEBIAN-CVE-2020-11742

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOPcopy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path...

ALPINE-CVE-2020-11743

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOPmapgrant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to retur...

ALPINE-CVE-2020-11742

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOPcopy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path...

CVE-2020-11743

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOPmapgrant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to retur...

CVE-2020-11743

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOPmapgrant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to retur...

UBUNTU-CVE-2020-11742

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOPcopy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path...

UBUNTU-CVE-2020-11743

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOPmapgrant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to retur...

Path traversal

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOPcopy. Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 introduced a path...

Bad continuation handling in GNTTABOP_copy

ISSUE DESCRIPTION Grant table operations are expected to return 0 for success, and a negative number for errors. The fix for CVE-2017-12135 / XSA-226 introduced a path through grant copy handling where success may be returned to the caller without any action taken. In particular the status fields...

Bad error path in GNTTABOP_map_grant

ISSUE DESCRIPTION Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly...

SQL injection vulnerability in beescm backend ad***.php file

BEESCMS is PHP + MYSQL architecture, multi-language system, content modules are easy to expand, diversified template styles, template production is simple and powerful, professional SEO optimization can meet the corporate website, foreign trade websites, institutions, educational institutions,...

SQL injection vulnerability in beescm backend ad***_co***.php file

BEESCMS is PHP+MYSQL architecture, multi-language system, easy to expand content modules, diversified template styles, simple and powerful template production, professional SEO optimization, easy to operate the background, fully meet the corporate website, foreign trade websites, institutions,...

Arbitrary File Deletion Vulnerability in the Backend of OurPHP Aopia Website Building System (CNVD-2020-26381)

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. OurPHP website builder system has an arbitrary file deletion vulnerability in the background, which can be exploited by attackers to delete any file under the server...

Unauthorized Access Vulnerability in Superstar Huiya E-Books

Super Star Huiya eBooks is currently the world's largest Chinese online digital library, providing a large number of eBook resources for reading, including literature, economics, computers, and more than 50 categories. Unauthorized access vulnerability exists in Super Star Huiya eBooks, which can...

UQCMS Cloud Business - B2B2C system backend has a logic flaw vulnerability

UQCMS Cloud Business-B2B2C System Multi-merchant e-commerce system is a B2B2C e-commerce software. UQCMS Cloud Merchant-B2B2C System has a logic flaw vulnerability in the background, which can be exploited by an attacker to bypass login privileges for administrator operations...

SQL injection vulnerability in beescm backend ad***_fl***.php file

BEESCMS is PHP+MYSQL architecture, multi-language system, easy to expand content modules, diversified template styles, simple and powerful template production, professional SEO optimization, easy to operate the background, fully meet the corporate website, foreign trade websites, institutions,...