EUVD-2020-16716

Malware in sbrugna...

EUVD-2020-16718

Malware in sbrugna...

EUVD-2021-8913

Malicious code in bioql PyPI...

CVE-2021-21741

There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

Conference Management Software 3.5.1 SQL Injection

==================================================================================================================================== | Title : Conference Management Software V3.5.1 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...

Conference Management Software 3.5.1 SQL Injection

==================================================================================================================================== | Title : Conference Management Software V3.5.1 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...

CVE-2021-21741

There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...

Command injection

There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...

CVE-2021-21741

There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...

CVE-2021-21741

CVE-2021-21741 concerns a command-execution vulnerability in a ZTE conference management system. The connected documents describe an issue where an attacker can trigger arbitrary commands by sending specific serialization commands, taking advantage of services enabled by default (e.g., payloads t...

SQL Injection Vulnerability in Video Conference Management System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the video conference management system of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

CVE-2020-23982

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23982

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23982

DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...

CVE-2020-23982

CVE-2020-23982 affects DesignMasterEvents Conference management 1.0.0, with a cross-site scripting vulnerability in the certificate.php endpoint. The available connected documents identify the issue as a stored/reflected or input-processing XSS via this PHP file, but do not provide specifics on e...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23980

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

Sql injection

DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...

CVE-2020-23980

CVE-2020-23980 affects DesignMasterEvents Conference Management 1.0.0 and allows SQL Injection via the administrator login page username field. CVSS3.1 base score 9.8 (CRITICAL); attack vector: NETWORK, no user interaction, no privileges required, confidentiality/integrity/availability impact: HI...