Sak1To-Shell - Multi-threaded C2 Server And Reverse Shell Client Written In Pure C

Multi-threaded c2 server and reverse TCP shell client written in pure C Windows. Command list: list: list available connections. interact id: interact with client. download filename: download a file from client. upload filename: upload a file to client. background: background client. exit:...

SQL injection vulnerability in the background fa***.php page of Shield Spirit Commodity Promotion System

Shield Spirit commodity promotion system can be applied to multiple types of public number, personal or business subscription number and service number can be used, easy to docking all kinds of public number, through the WeChat public number of the relevant interfaces configured to come into effe...

Unauthorized Access Vulnerability in H5S CONSOLE at ZeroVision Technologies (Shanghai) Co.

ZeroVision Technology Shanghai Co., Ltd. is to serve customers with leading video technology, committed to the Internet of Things video development simplicity, relying on HTML5 WebRTC and other new technologies to achieve the simplicity of the full-platform video playback. Unauthorized access...

Unauthorized access vulnerability in the background lo***.asp page of the website building system of Yunnan Tianren Network Technology Co.

Yunnan Tianren Network Technology Co., Ltd. is a set of network promotion, overall planning, domain name registration, website construction, e-commerce as one of the professional network services company, is the world's largest Chinese search engine - Baidu's general agent in Yunnan Province, but...

CVE-2020-28040

WordPress before 5.5.2 allows CSRF attacks that change a theme's background image...

DEBIAN-CVE-2020-28040

WordPress before 5.5.2 allows CSRF attacks that change a theme's background image...

CVE-2020-28040

WordPress before 5.5.2 allows CSRF attacks that change a theme's background image...

Cross site request forgery (csrf)

WordPress before 5.5.2 allows CSRF attacks that change a theme's background image...

CVE-2020-28040

WordPress before 5.5.2 allows CSRF attacks that change a theme's background image...

Command Execution Vulnerability in EasyReport

EasyReport is an easy to use Web reporting tool , its main function is to query the SQL statement to convert the data into a report page , while supporting the table across the rows RowSpan and across the columns ColSpan configuration. A command execution vulnerability exists in EasyReport. An...

CVE-2020-28040

WordPress before 5.5.2 allows CSRF attacks that change a theme's background image...

CVE-2020-28040

CVE-2020-28040 affects WordPress before 5.5.2, where CSRF can change a theme’s background image. Public sources in connected documents confirm this issue and that WordPress 5.5.2 (security/maintenance release) addresses it. Affected product: WordPress; root cause: CSRF vulnerability enabling back...

WordPress < 5.5.2 - Cross-Site Request Forgery (CSRF) to Change Theme Background

Description Erwan, a security researcher from the WPScan team, discovered and responsibly disclosed a Cross-Site Request Forgery CSRF vulnerability that could allow an unauthenticated attacker to change the background image of the theme. For a successful attack, a privileged authenticated WordPre...

Experts Warn of Privacy Risks Caused by Link Previews in Messaging Apps

Cybersecurity researchers over the weekend disclosed new security risks associated with link previews in popular messaging apps that cause the services to leak IP addresses, expose links sent via end-to-end encrypted chats, and even unnecessarily download gigabytes of data stealthily in the...

SQL injection vulnerability in the background up***.php file of Shield Spirit Original Article Submission System

The Shield Spirit Original Article Submission System is a concise submission system. A SQL injection vulnerability exists in the background up.php file of Shield Spirit Original Article Submission System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

CVE-2020-7744

This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Do...

Design/Logic Flaw

This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Do...

CVE-2020-7744 Information Exposure

This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls either within Google apps or via browser including file downloads, e-mail attachments and Google Do...

PT-2020-5776 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to insufficient mechanisms against cross-site request forgery CSRF in the WordPress content management system. This allows a remote attacker to exploit the weakness and impac...

Arbitrary file readout vulnerability in the background sh***.php interface of the Tianqing security isolation and information exchange system

Tianqing Security Isolation and Information Exchange System is the access control switch equipment with network isolation technology independently developed by Qixing Information Technology Co., Ltd, which provides high security isolation protection for key data. There is an arbitrary file readin...