25 matches found
EUVD-2020-16718
Malware in sbrugna...
EUVD-2020-16716
Malware in sbrugna...
EUVD-2021-8913
Malicious code in bioql PyPI...
CVE-2021-21741
There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...
CVE-2020-23980
DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...
Conference Management Software 3.5.1 SQL Injection
==================================================================================================================================== | Title : Conference Management Software V3.5.1 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
Conference Management Software 3.5.1 SQL Injection
==================================================================================================================================== | Title : Conference Management Software V3.5.1 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla...
CVE-2021-21741
There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...
Command injection
There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...
CVE-2021-21741: Deserialization of Untrusted Data
There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...
CVE-2021-21741
There is a command execution vulnerability in a ZTE conference management system. As some services are enabled by default, the attacker could exploit this vulnerability to execute arbitrary commands by sending specific serialization command...
CVE-2021-21741
CVE-2021-21741 concerns a command-execution vulnerability in a ZTE conference management system. The connected documents describe an issue where an attacker can trigger arbitrary commands by sending specific serialization commands, taking advantage of services enabled by default (e.g., payloads t...
SQL Injection Vulnerability in Video Conference Management System of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the video conference management system of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...
CVE-2020-23982
DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...
CVE-2020-23982
DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...
CVE-2020-23982
CVE-2020-23982 affects DesignMasterEvents Conference management 1.0.0, with a cross-site scripting vulnerability in the certificate.php endpoint. The available connected documents identify the issue as a stored/reflected or input-processing XSS via this PHP file, but do not provide specifics on e...
CVE-2020-23982
DesignMasterEvents Conference management 1.0.0 has cross site scripting via the 'certificate.php'...
CVE-2020-23980
DesignMasterEvents Conference management 1.0.0 allows SQL Injection via the username field on the administrator login page...