WordPress Construction Lite theme <= 1.2.5 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Lenon Leite Patchstack Red Team project in WordPress Construction Lite theme versions = 1.2.5. This theme uses a vulnerable piece of code related to previously identified vulnerability - CVE-2021-39317. Solution Deactivate and delete. The vendor...

voellerconstruction.com Improper Access Control vulnerability OBB-2268194

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Coming Soon, Under Construction ＆ Maintenance Mode By Dazzler plugin跨站脚本漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress Coming Soon, Under Construction...

CVE-2021-24539 Coming Soon, Under Construction & Maintenance Mode By Dazzler < 1.6.7 - Admin+ Stored Cross-Site Scripting

The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming Soon mode is enabled, even when the unfilteredhtml capability is disallowed, leading to an...

CVE-2021-24539: Improper Neutralization of Input During Web Page Generation

The Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin before 1.6.7 does not sanitise or escape its description setting when outputting it in the frontend when the Coming Soon mode is enabled, even when the unfilteredhtml capability is disallowed, leading to an...

PT-2021-16060

Name of the Vulnerable Software and Affected Versions Coming Soon, Under Construction & Maintenance Mode By Dazzler WordPress plugin versions prior to 1.6.7 Description The issue arises from the plugin's failure to sanitise or escape its description setting when outputting it in the frontend whil...

Oracle Primavera Gateway (Oct 2021 CPU)

The version of Primavera Gateway installed on the remote host is affected by multiple vulnerabilities as referenced in the October 2021 CPU advisory, including the following: - Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications component: SIM...

S-CMS Access Control Error Vulnerability

S-CMS is a PHP and MySQL-based content management system CMS from S-CMS, a Chinese company. S-CMS suffers from an access control error vulnerability, which originates from an unauthorized access vulnerability in CMS Enterprise Website Construction System 5.0. An attacker can use this vulnerabilit...

CVE-2021-37270

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...

Design/Logic Flaw

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...

CVE-2021-37270

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...

CVE-2021-37270

The CVE-2021-37270 entry concerns the CMS Enterprise Website Construction System 5.0. Multiple sources (NVD and CNVD family, CNVD/CNNVD variants) describe an unauthorized access vulnerability that allows an attacker to directly access a backend path without authentication and obtain backend admin...

S-CMS 访问控制错误漏洞

S-CMS is a PHP and MySQL-based content management system CMS from S-CMS, a Chinese company. S-CMS suffers from an access control error vulnerability, which originates from an unauthorized access vulnerability in CMS Enterprise Website Construction System 5.0. An attacker can use this vulnerabilit...

PT-2021-21597

Name of the Vulnerable Software and Affected Versions CMS Enterprise Website Construction System version 5.0 Description The issue allows attackers to gain unauthorized access to the background administrator authority without logging in. This is achieved by directly accessing a specified backgrou...

CVE-2021-37270: Missing Authorization

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...

WordPress Catch Under Construction plugin <= 1.3.4 - Unauthorized Plugin Setting Change vulnerability

Unauthorized Plugin Setting Change vulnerability discovered by apple502j in WordPress Catch Under Construction plugin versions = 1.3.4. Solution Update the WordPress Catch Under Construction plugin to the latest available version at least 1.4...

Autodesk Navisworks Buffer Overflow Vulnerability (CNVD-2022-05702)

Autodesk Navisworks, Autodesk's 3D model review software for architecture, engineering and construction, is vulnerable to a buffer overflow vulnerability that originates when a maliciously crafted DWG file may be forced to read beyond its allocated boundaries when parsing the DWG file, allowing a...

Autodesk Navisworks Buffer Overflow Vulnerability

Autodesk Navisworks, Autodesk's 3D model review software for architecture, engineering and construction, is vulnerable to a buffer overflow vulnerability that originates when a maliciously crafted DWG file may be forced to write outside of the allocated boundaries when parsing the DWG file, and a...

Autodesk Navisworks Out-of-Bounds Read Vulnerability (CNVD-2021-99309)

Autodesk Navisworks, a 3D model review software for architecture, engineering and construction, is vulnerable to an out-of-bounds read vulnerability in Autodesk Navisworks versions 2019, 2020, 2021, 2022. An attacker can exploit the vulnerability to execute arbitrary code via specially crafted PD...

Autodesk Navisworks Memory Corruption Vulnerability

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction. A memory corruption vulnerability exists in Autodesk Navisworks versions 2019, 2020, 2021, 2022. An attacker can exploit the vulnerability to execute code via specially crafted DLL files...