SQL Injection Vulnerability in the Background of AiteCms System of Hainan Zanzan Network Technology Co.

Hainan Zanzan Network Technology Co., Ltd. is a network company in the industry that provides professional website construction, network service and operation technology output. There is a SQL injection vulnerability in the background of AiteCms system of Hainan Zanzan Network Technology Co., Ltd...

ECShop full version of the background of the existence of arbitrary file deletion vulnerability

ECShop is a B2C independent online store system, suitable for enterprises and individuals to quickly build a personalized online store. The system is based on PHP language and MYSQL database structure development of cross-platform open source program. ECShop full version of the background of the...

Vulnerability of universal password login in the background of website building system of Guangzhou Yongtuo Information Technology Co.

Guangzhou Yongtuo Information Technology Co., Ltd. website building system is a website building system. There is a universal password login vulnerability in the background login page of Guangzhou Yongtuo Information Science and Technology Co...

yershop open source online store system code execution vulnerabilities exist in the background

yershop open source online store system is a thinkphp5-based mall system with a key to generate controllers , models , validators , templates , general additions and deletions , and other functions. yershop open source online store system code execution vulnerabilities exist in the background , a...

OFCMS background upload file upload vulnerability

OFCMS is a content management system developed based on java technology. There is a file upload vulnerability in OFCMS background upload, which can be exploited by attackers to upload webshell and gain server privileges, posing information leakage and operational security risks...

OFCMS Background Command Execution Vulnerability

OFCMS is a content management system based on Java technology. A background command execution vulnerability exists in versions of OFCMS prior to 1.1.3. The vulnerability can be exploited to execute commands via a template file with ' $ ex"' followed by the command...

SQL Injection Vulnerability at the login of Central Message Board v3.2

Central Message Board is an online message system developed by Central Studio using oop. Azeus Message Board v3.2 SQL injection vulnerability exists at the login. Azeus Message Board v3.2 fails to filter the name parameter in the background login, allowing attackers to exploit the vulnerability f...

Google Chrome M72 - RenderFrameHostImpl::CreateMediaStreamDispatcherHost Use-After-Free

Google Chrome M72 - RenderFrameHostImpl::CreateMediaStreamDispatcherHost Use-After-Free There's a race-condition / object-lifetime issue in the browser process when the browser process shutdown races against the IO thread handling mojo messages from the renderer. It's at least possible to trigger...

USN-3866-3 ghostscript regression

USN-3866-2 fixed a regression in Ghostscript. The Ghostscript update introduced a new regression that resulted in certain pages being printed with a blue background. This update fixes the problem. Original advisory details: Tavis Ormandy discovered that Ghostscript incorrectly handled certain...

How to Stop Facebook App From Tracking Your Location In the Background

Every app installed on your smartphone with permission to access location service "can" continually collect your real-time location secretly, even in the background when you do not use them. Do you know? — Installing the Facebook app on your Android and iOS smartphones automatically gives the...

TAU Threat Intelligence Notification: Shade Ransomware

Summary Recently there is a new wave of malicious spam campaign distributing Shade ransomware via sending malicious JavaScript attachments. The spam campaign was mainly targeting users from Russia, and the ransom note was written in both Russian and English. This variant of Shade ransomware will...

USN-3871-2 linux regression

USN-3871-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. Unfortunately, that update introduced regressions with docking station displays and mounting ext4 file systems with the metabg option enabled. This update fixes the problems. We apologize for the inconvenience. Original...

SQL injection vulnerability in the background us***.php page of TreeHole's external link system

Treehole external link system is a free and open source PHP external link network disk system. Treehole external link system background us.php page SQL injection vulnerability , the vulnerability stems from the failure to effectively filter the variable search, attackers can use the vulnerability...

SQL injection vulnerability in the background cm***.php file of Vanno enterprise website management system (PHP version) (CNVD-2019-05487)

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. VANOC enterprise website management system PHP version background cm.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitiv...

[SECURITY] Fedora 28 Update: wget-1.20.1-1.fc28

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

Google Removes 85 Adware Apps That Infect 9 Million Android Users

Google has removed 85 apps from its Play Store after finding out that they were pushing aggressive, full-screen adware to Android users. With the rise in the mobile market, Adware has become one of the most prevalent mobile threats in the world. Adware has traditionally been used to aggressively...

[SECURITY] Fedora 29 Update: wget-1.20.1-1.fc29

GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest wit...

CVE-2018-20166

A file-upload vulnerability exists in Rukovoditel 2.3.1. index.php?module=configuration/save allows the user to upload a background image, and mishandles extension checking. It accepts uploads of PHP content if the first few characters match GIF data, and the filename ends in ".php" with mixed...

Zzzphp V1.5.9 SQL Injection Vulnerability in Background sa***.php File

zzphp is a free website building system developed using PHP. Zzzphp V1.5.9 SQL injection vulnerability exists in the background sa.php file, which can be exploited by attackers to obtain sensitive information from the database...

Rukovoditel Project Management CRM 2.3.1 Remote Code Execution

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'uri' class MetasploitModule 'Rukovoditel Project Management/CRM 2.3.1 - Authenticated Remote Code Execution', 'Description' = %q This module...