DEBIAN-CVE-2021-31535

LookupCol.c in X.Org X through X11R7.7 and libX11 before 1.7.1 might allow remote attackers to execute arbitrary code. The libX11 XLookupColor request intended for server-side color lookup contains a flaw allowing a client to send color-name requests with a name longer than the maximum size allow...

Command Execution Vulnerability in YMBCMS Backend

YMBCMS website management system also known as YMBCMS is one of the independent research and development products of Hebei OuRunTianTeng YMBCMS network studio.YMBCMS set computer station, cell phone station, WeChat public platform, small program, APP in one, shared space, data synchronization, is...

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to gain access to modify, add, or delete data, or to gain full control over the application.

The vulnerability of the Shopping Cart component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain access to modify, add, or delete data, o...

TnCMS suffers from a deserialization vulnerability

TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS suffers from a deserialization vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in ShuipFCMS

ShuipFCMS is a content management system based on ThinkPHP framework as the core and developed in an independent grouping approach. ShuipFCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

DLL Hijacking Vulnerability in 115chrome.exe Module in 115 Computer Edition by Guangdong One One Five Technology Co.

115 PC version is a collection of 115, 115 organization, browser PC client, and 115 service perfect integration. Ltd. 115 computer version of the dll hijacking vulnerability, the attacker can be exploited to cause the user's computer to be remote control or implanted Trojan horse...

The vulnerability of the Promotions component of the Oracle Retail Customer Management and Segmentation Foundation software allows a hacker to gain full control over the application.

The vulnerability of the Promotions component in Oracle Retail Customer Management and Segmentation Foundation software is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain full control over the application using the HTTP protocol...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain full control over the application.

The vulnerability of the Core component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the application...

D-Link DIR-817LW and D-Link DIR-868L License Issue Vulnerability

The D-Link DIR-817LW and the D-Link DIR-868L are both wireless routers from AUO D-Link of Taiwan, China. A security vulnerability exists in the D-Link DIR-868L version B1-2.03 and the DIR-817LW version A1-1.04, which stems from the fact that some web interfaces do not require authentication. The...

Smart TV Box fails to restrict access permissions

Overview Smart TV Box provided by KDDI CORPORATION enables access to Android Debug Bridge via port 5555/TCP of LAN side interface. When a cable television provider sets up Smart TV Box at an individual residence, direct access from outside to the LAN side interface of Smart TV Box is disabled...

Xiaomi Electric Scooters Vulnerable to Life-Threatening Remote Hacks

Smart devices definitely make our lives easier, faster, and more efficient, but unfortunately, an insecure smart device can also ruin your day, or sometime could even turn into the worst nightmare of your life. If you are an electric scooter rider, you should be concerned about yourself. In a...

UBUNTU-CVE-2018-13410

Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service invalid free and application crash or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an...

Code execution vulnerability in weiphp 2.0 frontend

WeiPHP is an open source WeChat public platform development framework to build a personal WeChat public account operation platform. A code execution vulnerability exists in the weiphp 2.0 frontend platform, which can be exploited by attackers to execute code and thus gain control of the server...

CVE-2017-8156

The outdoor unit of Customer Premise Equipment CPE product B2338-168 V100R001C00 has a no authentication vulnerability on the serial port. An attacker can access the serial port on the circuit board of the outdoor unit and log in to the CPE without authentication. Successful exploit could allow t...

Half of Leading USB Controller Chips Vulnerable to BadUSB

BadUSB hasn’t gone from bad to worse necessarily, but it sure has reached a new state of confusion for security experts and consumers in the crosshairs. Researcher Karsten Nohl, who warned the world during Black Hat last summer that the controller chips in most USB devices could be reprogrammed t...

MGASA-2014-0035 Updated flash-player-plugin packages fix CVE-2014-0497

Adobe Flash Player 11.2.202.336 contains a fix to a critical security vulnerability found in earlier versions that could cause a crash and potentially allow an attacker to remotely take control of the affected system. This update resolves an integer underflow vulnerability that could be exploited...

Default Password (nasadmin) for 'root' Account

The account 'root' on the remote host has the password 'nasadmin'. An attacker may leverage this issue to gain total control of the affected system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. account = "root"; password = "nasadmin"; include'deprecatednasllevel.inc'; include'compat.inc';...

ISS Security Brief: Multiple Vulnerabilities in Microsoft RPC Service

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Brief September 10, 2003 Multiple Vulnerabilities in Microsoft RPC Service Synopsis: Microsoft has released a security bulletin MS03-039 detailing three distinct vulnerabilities in the Windows RPC Remote Procedure Call...

Oracle Net Services CREATE DATABASE LINK Query Overflow

The remote Oracle Database, according to its version number, is vulnerable to a buffer overflow in the query CREATE DATABASE LINK. An attacker with a database account may use this flaw to gain the control on the whole database, or even to obtain a shell on this host. %NASLMINLEVEL 70300 C Tenable...

Authentication flaw in microsoft SMB protocol

Detailed information: http://seclab.ce.aut.ac.ir/vreport.htm Summary ======= Microsoft uses SMB Protocol for “File and Printer sharing service” in all versions of Windows. Upon accessing a network resource, NTLM Authentication is used to authenticate the client on the server. When a logged-in use...