15612 matches found
UCMS arbitrary file upload vulnerability
UCMS is a simple and efficient PHP open source CMS website building system. UCMS v1.6 contains an arbitrary file upload vulnerability that can be exploited by attackers to execute arbitrary code via carefully crafted PHP files...
CVE-2022-28440
An arbitrary file upload vulnerability in UCMS v1.6 allows attackers to execute arbitrary code via a crafted PHP file...
Slackware: Security Advisory (SSA:2016-097-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), arises from overflowing buffers in the dynamic memory, allowing a intruder to trigger a service failure or execute arbitrary code.
The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, arises due to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a malicious actor to cause service failures or execute arbitrary code using specially created messages...
Oracle Solaris has an unspecified vulnerability (CNVD-2022-31849)
Oracle Solaris is a UNIX operating system from Oracle Systems, Inc. A security vulnerability in Oracle Solaris allows a highly privileged attacker to compromise Oracle Solaris by logging into the infrastructure where Oracle Solaris is executed. A successful attack requires human interaction from...
The vulnerability in the implementation of the “execute restore src-vis” command in FortiOS operating systems allows a hacker to write arbitrary files.
The vulnerability in the execution of the “execute restore src-vis” command in FortiOS operating systems lies in the loading of code without checking its integrity. Exploiting this vulnerability allows an attacker to write arbitrary files using specially crafted update packages...
CVE-2021-26626
Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first parameter value could be passed to the ShellExecuteW API. The passed parameter is an arbitrary code to ...
CVE-2021-26626
Improper input validation vulnerability in XPLATFORM's execBrowser method can cause execute arbitrary commands. IF the second parameter value of the execBrowser function is ‘default’, the first parameter value could be passed to the ShellExecuteW API. The passed parameter is an arbitrary code to ...
CVE-2021-26625
The CVE-2021-26625 entry concerns the Nexacro platform (Tobesoft Nexacro). The root cause is an automatic update feature that does not verify input data beyond version information, enabling a remote attacker to download and execute arbitrary malicious files. Public details specify Nexacro/17.x va...
Tobesoft Xplatform 输入验证错误漏洞
Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS auto-setting, and multi-document interfaces. An input validation error vulnerability exists in the execBrowser method of Tobesoft Xplatform prior to...
Multiple Adobe products out-of-bounds write vulnerability (CNVD-2022-46967)
Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Reader is a set of PDF document reading software. Several Adobe products have out-of-bounds write vulnerabilities, attackers can use the vulnerability in the context of the current user to execute arbitrary code...
Server side request forgery (ssrf)
A Server-Side Request Forgery SSRF in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file...
CVE-2021-40386
Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code...
CVE-2021-40386
Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code...
Adobe Photoshop out-of-bounds write vulnerability (CNVD-2022-52087)
Adobe Photoshop is a set of image processing software from the American company Adobe. An out-of-bounds write vulnerability exists in Adobe Photoshop. An attacker could use this vulnerability to execute arbitrary code in the context of the current user...
PayloadCMS arbitrary file upload vulnerability
PayloadCMS is a Headless CMS and application framework built using TypeScript, Node.js, React and MongoDB.PayloadCMS is vulnerable to arbitrary file uploads, which can be exploited by attackers to execute arbitrary code via crafted SVG files...
Adobe After Effects Buffer Overflow Vulnerability (CNVD-2022-67848)
Adobe After Effects is a suite of visual effects and motion graphics software from Adobe. Adobe After Effects is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...
Notable 路径遍历漏洞
Notable is a Markdown-based note-taking software with cross-platform support from the individual developers of Notable. A path traversal vulnerability exists in Notable-insiders that stems from incorrect validation of the file URI scheme. Hyperlinks pointing to SMB shares could lead to the...
Adobe Photoshop out-of-bounds write vulnerability (CNVD-2022-42168)
Adobe Photoshop is a set of image processing software from Adobe. Adobe Photoshop is vulnerable to an out-of-bounds write vulnerability. An attacker could exploit the vulnerability to execute code in the context of the current user...