Arbitrary File Read Vulnerability in WORMCMS of Shanghai Yanfeng Information Technology Co.

WORMCMS is open source and free PHP enterprise website development and construction management system. Shanghai Yanfeng Information Technology Co. WORMCMS has an arbitrary file reading vulnerability, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in WORMCMS of Shanghai Yanfeng Information Technology Co.

WORMCMS is open source and free PHP enterprise website development and construction management system. Shanghai Yanfeng Information Technology Co. WORMCMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...

Weak password vulnerability in ECMS

Changzhou Ruixin Technology is a manufacturer specializing in remote meter reading, energy consumption monitoring and energy control system construction. There is a weak password vulnerability in ECMS, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in the Supervisory Platform of Zhongke Nintu Technology Jiangsu Co.

Nanjing Nintu Information Technology Co., Ltd now renamed as Zhongke Nintu Technology Jiangsu Co., Ltd was founded in August 2009, is a software development and service-oriented enterprise with the technical background of gis laboratory of Hohai University. Its product supervision platform is...

SQL Injection Vulnerability in Website Construction System of Guangzhou Daxun Yunshang Network Technology Co.

Guangzhou Daxun Yunshang Network Technology Co., Ltd. is a company mainly engaged in enterprises and institutions of Internet application services, website construction, mobile station, micro letter platform depth development, SEO website optimization and promotion of business. Guangzhou Daxun...

Shanghai Qinwang Network Technology Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-41642)

Shanghai Qinwang Network Technology Co., Ltd. is a company with website construction, mobile Internet products and integrated marketing services as its core business. There is a SQL injection vulnerability in the website building system of Shanghai Qinwang Network Technology Co. Ltd, which can be...

SQL Injection Vulnerability in Website Building System of Zhucheng City Three Swords Network Media Limited (CNVD-2021-39102)

Zhucheng City Three Swords Network Media Co., Ltd. focuses on providing Zhucheng website construction, website production, website optimization, Zhucheng mobile website construction, web design, website production company. There is a SQL injection vulnerability in the Zhucheng City Three Swords...

PYSEC-2021-710

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in caused by an integer overflow in constructing a new tensor shape. This is because the...

PYSEC-2021-221

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in caused by an integer overflow in constructing a new tensor shape. This is because the...

CVE-2021-24191

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Maintenance Mode & Site Under Construction WordPress plugin before 1.8.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blo...

CVE-2021-24191

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Maintenance Mode & Site Under Construction WordPress plugin before 1.8.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blo...

CVE-2021-24191

The CVE-2021-24191 entry concerns the WordPress WP Maintenance Mode & Site Under Construction plugin (versions before 1.8.2). A low-privilege user can abuse the AJAX action cp_plugins_do_button_job_later_callback to install any plugin (including a specific version) from the WordPress repository a...

PT-2021-15737

Name of the Vulnerable Software and Affected Versions: WP Maintenance Mode & Site Under Construction WordPress plugin versions prior to 1.8.2 Description: The issue allows low-privileged users to install any plugin, including specific versions, from the WordPress repository and activate arbitrary...

WordPress plugin WP Maintenance Mode & Site Under Construction 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . WP Maintenance Mode & Site Under Construction An...

CVE-2021-24191: Improper Authorization

Low privileged users can use the AJAX action 'cppluginsdobuttonjoblatercallback' in the WP Maintenance Mode & Site Under Construction WordPress plugin before 1.8.2, to install any plugin including a specific version from the WordPress repository, as well as activate arbitrary plugin from then blo...

SQL Injection Vulnerability in Hefei Chenguang Technology Website Building System (CNVD-2021-34557)

Hefei Chenguang Technology is a company engaged in website construction and website production. Hefei Chenguang Technology website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Prometei Botnet Exploiting Unpatched Microsoft Exchange Servers

Attackers are exploiting the ProxyLogon Microsoft Exchange Server flaws to co-opt vulnerable machines to a cryptocurrency botnet named Prometei, according to new research. "Prometei exploits the recently disclosed Microsoft Exchange vulnerabilities associated with the HAFNIUM attacks to penetrate...

Oracle Primavera Gateway (Apr 2021 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote host is 16.2.x, 17.12.x prior to 17.12.11. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - Vulnerability in the Primavera Gateway...

WordPress WP Maintenance Mode & Site Under Construction plugin <= 1.8.1 - Arbitrary Plugin Installation and Activation vulnerability

Arbitrary Plugin Installation and Activation vulnerability discovered by Bugbang in WordPress WP Maintenance Mode & Site Under Construction plugin versions = 1.8.1. Solution Update the WordPress WP Maintenance Mode & Site Under Construction plugin to the latest available version at least 1.8.2...

Oracle Primavera Unifier (Apr 2021 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote host is 16.x prior to 16.2.16.5 or 17.x prior to 17.12.11.7 or 18.8.x prior to 18.8.18.4 or 19.12.x prior to 19.12.14 or 20.12.x prior to 20.12.4. It is, therefore, affected by multiple...