Logic Flaw Vulnerability in the Backend Management Login Interface of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system back-end management login interface has a logic flaw vulnerability that can be exploited by an attacker to violently break the administrator's password...

openSUSE: Security Advisory for qemu (openSUSE-SU-2019:2510-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-11712

WebCore/platform/network/soup/SocketStreamHandleImplSoup.cpp in the libsoup network backend of WebKit, as used in WebKitGTK+ versions 2.20.0 and 2.20.1, failed to perform TLS certificate verification for WebSocket connections...

Command Execution Vulnerability in the Background of Wild Rain Novel CMS

Wild Rain Novel cms is a lightweight novel website solution based on ThinkPHP 5.1+MySQL technology. Rainy Novel cms backend has a command execution vulnerability, attackers can use the vulnerability to execute malicious code...

Apache Httpd < 2.4.42 : mod_proxy_ftp use of uninitialized value

in Apache HTTP Server versions 2.4.0 to 2.4.41, modproxyftp use of uninitialized value with malicious FTP backend...

SQL Injection Vulnerability in CRMEB Mall System Backend Sy***.php Page

CRMEB mall system is a new retail mobile e-commerce system developed based on ThinkPhp6.0+Vue. CRMEB mall system background Sy.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

CVE-2014-8182

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses...

Code injection

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses...

CVE-2014-8182

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses...

CVE-2014-8182

CVE-2014-8182 concerns OpenLDAP 2.4 slapd when processing DNS SRV messages. An off-by-one error can cause a crash if the dnssrv backend is used, allowing a remote attacker to crash the service with crafted DNS responses. The available connected sources confirm the affected software (OpenLDAP 2.4/...

OX App Suite 7.10.2 Cross Site Scripting / Improper Access Control

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 67097 Bug ID Vulnerability type: Cross-site scripting CWE-80 Vulnerable version: 7.10.2 and earlier Vulnerable component: backend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.10.2-rev14,...

File Upload Vulnerability in WellCMS v2.0 Backend

WellCMS is an open source, mobile-oriented lightweight CMS. A file upload vulnerability exists in the WellCMS v2.0 backend, which can be exploited by attackers to gain server privileges...

Code Execution Vulnerability in XYHCMS Backend

XYHCMS is an open source CMS content management system. There is a code execution vulnerability in the background of XYHCMS, which can be exploited by an attacker to add malicious code in site.php, so that the attacker can gain access to the target terminal...

NewStart CGSL CORE 5.05 / MAIN 5.05 : gvfs Vulnerability (NS-SA-2019-0238)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has gvfs packages installed that are affected by a vulnerability: - An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users...

SQL Injection Vulnerability in Ocean CMS Backend ad***_vi***.php File

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. There is a SQL injection vulnerability in the advi.php file in the background of Ocean CMS. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2019-16789 HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers

In Waitress through version 1.4.0, if a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially crafted requests containing special...

File Inclusion Vulnerability in HulaCWMS Backend

HulaCWMS Hula Enterprise Website Management System is based on ThinkPHP5 framework development, including all the features of ThinkPHP5. A file inclusion vulnerability exists in the backend of HulaCWMS. An attacker can exploit the vulnerability to gain server privileges...

zzzphp v1.7.5 Command Execution Vulnerability in Backend

zzphp is a content management system CMS. A command execution vulnerability exists in the backend of zzzphp v1.7.5, which can be exploited by attackers to execute malicious code...

Vulnerabilities in the Backend Management System of Shanghai Likang Network Technology Co.

Ltd. adhering to the website construction as the basis, network marketing for the purpose of combining website optimization, content, creative multi-dimensional, to provide you with website construction, website optimization, site optimization services. Ltd. website backend management system ther...

PHPOK system 5.4 file upload vulnerability in the background of Shenzhen Kunshuo Technology Co.

PHPOK system hereinafter referred to as OK system is a content management system for website construction developed by Shenzhen Kunshuo Technology Co., Ltd formerly known as PHPOK Studio, written in PHP, using MySQL database storage by default, and based on the LGPL open-source agreement licensed...