8869 matches found
SQL Injection Vulnerability in Heybbs Micro Community
HEYBBS micro-community is a front-end based on bootstrap+jq+css, back-end php+mysql development of micro-community program. Heybbs micro-community SQL injection vulnerability, attackers can use the vulnerability to obtain database information...
CVE-2020-8880
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Design/Logic Flaw
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2020-8879
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Studio Photo 3.6.6.916. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...
DigitalOcean: Unauthorized access to https://shipit.analogpond.com/
Summary: Unauthorized access to https://shipit.analogpond.com/digitalocean/marketplace/production/ with ability to rollback deploys just like digitalocean developers. Steps To Reproduce: I was doing recon when I came accross marketplace-fra1.digitalocean.com with CNAME...
[サイバーセキュリティ月間2020] 製品のサポートが終了したらどうなるの？
2020 年 1 月に、広く利用されてきた Windows 7, Windows Server 2008/2008R2 のサポートが終了して既に数か月が過ぎました。サポートが終了す...
March 17, 2020—KB4541329 (OS Build 14393.3595)
None None...
March 17, 2020—KB4541333 (OS Build 17134.1399)
None None...
March 17, 2020—KB4541330 (OS Build 16299.1775)
None None...
Microsoft Edge Shares Privacy-Busting Telemetry, Research Alleges
Microsoft Edge is one of the least private web browsers — even more so than other popular browsers like Google Chrome and Mozilla Firefox — according to academic researchers. According to the analysis, from Douglas Leith with the School of Computer Science and Statistics at Trinity College in...
WordPress RegistrationMagic SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.RegistrationMagic is a user registration plugin used in it. A SQL injection vulnerability exists in WordPress RegistrationMagic version...
March 10, 2020—KB4540681 (OS Build 16299.1747)
None None...
March 10, 2020—KB4540670 (OS Build 14393.3564)
None None...
March 10, 2020—KB4540705 (OS Build 15063.2313)
None None...
waitress: HTTP Request Smuggling through Invalid whitespace characters in headers
An HTTP-interpretation flaw was found in waitress, through version 1.4.0. If a proxy server is used in front of waitress, an invalid request may be sent by an attacker that bypasses the front-end and is parsed differently by waitress leading to a potential for HTTP request smuggling. Specially...
Command injection
Multiple ZyXEL network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve authentication by using th...
CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi
Multiple ZyXEL network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. ZyXEL NAS devices achieve authentication by using th...
File Upload Vulnerability in LaiKe Full Scene Ecommerce System
LaiKe full-scene e-commerce system is a WeChat small program e-commerce platform front and back end open source PHP, including distribution, group, lottery, red packets and other functions , the entire system architecture is very simple , suitable for small teams or individual developers secondar...
