CVE-2019-19033

CVE-2019-19033：Jalios JCMS 10 后门账户 / 认证绕过 I. 漏洞 Jalios JCMS 10 允许攻击者通过一个后门账户（可使用任意用户名和特定密码）以管理权限访问网站的任何部分以及 WebDAV 服务器。 II. CVE 参考 CVE-2019-19033 III. 供应商 Jalios https://www.jalios.com/jcms/j6/en/home IV. 时间线 2019年11月8日 - 发现漏洞 2019年11月9日 - 联系供应商 2019年11月14日 - 供应商修复漏洞 V. 描述...

MAL-2026-12764 Malicious code in devplatform-spa-plugin-devtools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9000b7892808e2b10e702cb2b6f91fc672ad1bc0f58dfdc4c9cf2aa97edff896 On require of the package's main entry, support.js runs an init routine that assembles destination hosts from split string fragments...

Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities

Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account using any username and a specific password. Jalios JCMS 10 Backdoor Account / Authentication Bypass Vulnerabilities I. VULNERABILITY...

Exploit for Use of Hard-coded Credentials in Jalios Jcms

CVE-2019-19033: Jalios JCMS 10 Backdoor Account / Authenticati...