1993 matches found
Amazon Linux 2 : kernel (ALAS-2020-1480)
The version of kernel installed on the remote host is prior to 4.14.192-147.314. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1480 advisory. 2024-06-19: CVE-2020-14356 was added to this advisory. The Serial Attached SCSI SAS implementation in the Linux...
mgm.com.co Cross Site Scripting vulnerability OBB-1275111
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WECON LeviStudioU (Update C)
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: WECON Technology Co., Ltd WECON Equipment: LeviStudioU --------- Begin Update C Part 1 of 3 --------- Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of XML External Entity Reference, Heap-based...
Eibiz i-Media Server Digital Signage 3.8.0 Remote Privilege Escalation / Account Takeover Exploit
Eibiz i-Media Server Digital Signage version 3.8.0 suffers from an unauthenticated remote privilege escalation and account takeover vulnerability that can be triggered by directly calling the updateUser object part of ActionScript object graphs, effectively elevating to an administrative role or...
Eibiz i-Media Server Digital Signage 3.8.0 (createUser) Authentication Bypass (Add Admin)
Summary EIBIZ develop advertising platform for out of home media in that time the world called "Digital Signage". Because most business customers still need get outside to get in touch which products and services. Online media alone cannot serve them right place, right time. Description The...
Eibiz i-Media Server Digital Signage 3.8.0 Authentication Bypass
!/usr/bin/env python3 -- coding: utf-8 -- Eibiz i-Media Server Digital Signage 3.8.0 createUser Authentication Bypass Add Admin Vendor: EIBIZ Co.,Ltd. Product web page: http://www.eibiz.co.th Affected version: =3.8.0 Summary: EIBIZ develop advertising platform for out of home media in that time t...
JVN#88315581: Multiple cross-site scripting vulnerabilities in Exment
Exment provided by Kajitori Co.,Ltd contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in some input fields CWE-79 - CVE-2020-5619 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4...
QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution (Unauthenticated)
Exploit Title: QiHang Media Web Digital Signage 3.0.9 - Remote Code Execution Unauthenticated Date: 2020-08-12 Exploit Author: LiquidWorm Vendor Homepage: http://www.howfor.com Tested on: Microsoft Windows Server 2012 R2 Datacenter CVE : N/A funct...
jhg.co.jp Cross Site Scripting vulnerability OBB-1260449
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
QiHang Media Web Digital Signage 3.0.9 Remote Code Execution Vulnerability
Exploit for hardware platform in category web applications function uploadShellPoC var xhr = new XMLHttpRequest; xhr.open"POST", "http://192.168.1.74:8090/QH.aspx", true; xhr.s...
SQL Injection Vulnerability in Co***.htm Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.
Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home decoration ERP management system Co.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...
QiHang Media Web Digital Signage 3.0.9 Arbitrary File Disclosure
QiHang Media Web QH.aspx Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability Vendor: Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. Product web page: http://www.howfor.com Affected version: 3.0.9.0 Summary: Digital Signage Software. Desc: The...
WordPress Podcast Importer SecondLine plugin <= 1.1.4 - Server-Side Request Forgery (SSRF) vulnerability
Server-Side Request Forgery SSRF vulnerability discovered by Suzhou Aurora Infinity Information Technology Co., Ltd. in WordPress Podcast Importer SecondLine plugin versions = 1.1.4. Solution Update the WordPress Podcast Importer SecondLine plugin to the latest available version at least 1.1.5...
QiHang Media Web (QH.aspx) Digital Signage 3.0.9 Arbitrary File Disclosure Vulnerability
Summary Digital Signage Software. Description The application suffers from an unauthenticated file disclosure vulnerability when input passed thru the 'filename' parameter when using the download action or thru 'path' parameter when using the getAll action is not properly verified before being...
QiHang Media Web Digital Signage 3.0.9 Arbitrary File Deletion
QiHang Media Web QH.aspx Digital Signage 3.0.9 Unauthenticated Arbitrary File Deletion Vendor: Shenzhen Xingmeng Qihang Media Co., Ltd. Guangzhou Hefeng Automation Technology Co., Ltd. Product web page: http://www.howfor.com Affected version: 3.0.9.0 Summary: Digital Signage Software. Desc: Input...
RHEL 8 : kernel (RHSA-2020:1372)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1372 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: powerpc: local user can read...
co-construire.be Cross Site Scripting vulnerability OBB-1235535
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
frontierpaperco.com Cross Site Scripting vulnerability OBB-1234908
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL Injection Vulnerability in the Co***.cl***.php File of Nethub's Chinese/English Enterprise Website Management System
Netizen Chinese and English enterprise website management system is developed with PHP + MYSQL technology and MVC mode, easy to maintain the code, support pseudo-static function, can generate google and baidu map, support custom url, keywords and description, in line with SEO standards. Nethub...
SQL injection vulnerability in Co***.asp page of website building system of Liaocheng City Sky Network Technology Co.
Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...