File upload vulnerability in Catfish Blog V3.9.0 backend (CNVD-2021-37306)

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...

Hebei Nanhao High-tech Development Co., Ltd. online marking system has a file upload vulnerability

Online marking system is an online marking system developed by Hebei Nanhao High-tech Development Co. There is a file upload vulnerability in the online marking system of Hebei Nanhao High-Tech Development Co., Ltd. that can be exploited by attackers to obtain server control privileges...

Cynthia has a command execution vulnerability

Cynthia is an issue management / bug management / task management / project management system. Cynthia suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32174)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

File Upload Vulnerability in OA Office Management System of Xiamen JDT Technology Development Co.

OA office management system is based on the concept of workflow, so that people within the enterprise to share information easily and quickly, efficiently and collaboratively; change the past complex, inefficient manual office, to achieve rapid and comprehensive information collection, informatio...

File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...

EasyBuilder Pro suffers from a dll hijacking vulnerability (CNVD-2021-05668)

EasyBuilder Pro is a HMI software developed by Wyland. EasyBuilder Pro suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

File upload vulnerability in waychar enrollment system (CNVD-2021-03305)

waychar online registration system, is an online registration system developed for sports events and other general events, supporting public numbers and small programs. A file upload vulnerability exists in the waychar registration system, which can be exploited by attackers to gain control of th...

Local Privilege Vulnerability in VMware Antivirus Software

Ltd. was founded in 1996, is a professional anti-virus vendor with strong comprehensive strength in China, and is a high-tech software enterprise integrating the research and development, production, sales and after-sales service of anti-virus software. A local privilege extraction vulnerability...

File Upload Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file upload vulnerability exists in MetInfo Enterprise CMS, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in the Backend of Code Ant Achievement Management System

Code Ant Achievement Management System is an elementary school achievement statistics system that focuses on optimizing achievement collection methods and enriching the dimensions of achievement analysis. A file upload vulnerability exists in the backend of Code Ant Achievement Management System,...

PT-2020-3668

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions prior to the fixed version Description An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon...

Linux Kernel Vulnerability

US-CERT is aware of a Linux kernel vulnerability affecting Linux PCs and servers and Android-based devices. Exploitation of this vulnerability may allow an attacker to take control of an affected system. US-CERT recommends that users and administrators review the Redhat Security Blog and the Debi...

CVE-2001-1359

Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon CCD when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server...