400 matches found
Desdev DedeCMS 代码注入漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...
italydreamvillas.de Cross Site Scripting vulnerability OBB-2815847
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security vulnerabilities: 5 times that organizations got hacked
Businesses and governments these days are relying on dozens of different Software-as-a-Service SaaS applications to run their operations — and it’s no secret that hackers are always looking for security vulnerabilities in them to exploit. According to research by BetterCloud, the average company...
dream-art.fr Cross Site Scripting vulnerability OBB-2626526
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Google Chrome Zero-Day Bugs Exploited Weeks Ahead of Patch
North Korean threat actors exploited a remote code execution RCE zero-day vulnerability in Google’s Chrome web browser weeks before the bug was discovered and patched, according to researchers. Google Threat Analysis Group TAG discovered the flaw, tracked as CVE-2022-0609, on Feb. 10, reporting a...
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability...
Privilege escalation
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21957
A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2021-21957
Dream Report ODS Remote Connector 20.2.16900.0 has a privilege-escalation flaw in the Remote Server via a specially crafted command injection that can lead to high-integrity code execution. The vulnerability can allow an attacker to replace binaries (e.g., RTM/ Rdxa paths) and gain NT SYSTEM priv...
PT-2021-14839 · Unknown · Dream Report Ods Remote Connector
Name of the Vulnerable Software and Affected Versions: Dream Report ODS Remote Connector version 20.2.16900.0 Description: A privilege escalation issue exists in the Remote Server functionality due to a specially-crafted command injection, which can lead to elevated capabilities. An attacker can...
Dream Report ODS Remote Connector privilege escalation vulnerability
Summary A privilege escalation vulnerability exists in the Remote Server functionality of Dream Report ODS Remote Connector 20.2.16900.0. A specially-crafted command injection can lead to elevated capabilities. An attacker can provide a malicious file to trigger this vulnerability. Tested Version...
Dream Report ODS Remote Connector 安全漏洞
Dream Report ODS Remote Connector is a remote connector from Dream Report, Inc. A security vulnerability exists in the remote server functionality of Dream Report ODS Remote Connector 20.2.16900.0, which can be triggered by an attacker providing a malicious file...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2021-81100)
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the activepath, keyword,...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2021-81098)
DedeCMS Dream Weaving Content Management System is a set of simple, robust, flexible, open source several characteristics of open source content management system. DedeCMS has a cross-site scripting vulnerability that can be exploited to inject malicious script code via the filename, mid, userid ...
dream-trading.ci Cross Site Scripting vulnerability OBB-2128795
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-26606
A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficient validation of the authorization certificate. An attacker could exploit this vulnerability by sending a crafted HTTP request an affected program. A successf...
Authorization
A vulnerability in PKI Security Solution of Dream Security could allow arbitrary command execution. This vulnerability is due to insufficient validation of the authorization certificate. An attacker could exploit this vulnerability by sending a crafted HTTP request an affected program. A successf...
CVE-2021-26606
Affected product: Dream Security PKI Security SolutionVulnerability: Arbitrary command execution due to insufficient validation of the authorization certificate, exploitable via a crafted HTTP request to an affected program.Impact: Remote code execution on the target system (as described in sourc...