SOURCEFORGE Adminer Code Issue Vulnerability

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. It provides database management in a single PHP file. A code issue vulnerability exists in SOURCEFORGE Adminer that arises from improper design or implementation during code development of a web-based system or product...

Qognify Ocularis Code Issue Vulnerability

A code issue vulnerability exists in Qognify Ocularis that arises from improper design or implementation during code development for a network system or product...

Monitorr Code Issue Vulnerability

A code issue vulnerability exists in Monitorr that arises from improper design or implementation during code development of a network system or product...

Agentejo Cockpit Code Issue Vulnerability

Agentejo Cockpit is a management system for managing structured content on websites from Agentejo, Germany. Agentejo Cockpit cockpit-project.org A code issue vulnerability exists that arises from improper design or implementation during code development for a web system or product...

CloudBees Jenkins Nerrvana Plugin Code Issue Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Audit Trail Plugin is used in one of the audi...

Red Hat OpenShift Container Platform Code Issue Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A security vulnerability exists in Red Hat OpenShift Container Platform that stems from improper design or implementation during code...

Mattermost Server Code Issue Vulnerability (CNVD-2020-35442)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A code issue vulnerability exists in Mattermost Server that arises from improper design or implementation during code development of a network system or product. No detailed vulnerability details ar...

Multiple Qualcomm Products Code Issue Vulnerabilities

Qualcomm MDM9607 and others are products of Qualcomm Incorporated.The MDM9607 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU product.The SDX24 is a modem.The MDM9640 is a central processing unit CPU product.The MDM9640 is a central processing unit CPU...

CVE-2018-7946

There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak...

CVE-2017-17279

The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343C00 has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can...

CVE-2017-8153

Huawei VMall for Android with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access...

CVE-2017-8151

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the...

Privilege escalation

Huawei VMall for Android with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access...

Authentication flaw

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the...

Authorization

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have a Factory Reset Protection FRP bypass security vulnerability due to the improper design. An attacker can access factory reset page without authorization by only dial with special code. The attacker can exploit thi...

CVE-2017-8151

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the...

CVE-2017-8153

Huawei VMall for Android with the versions before 1.5.8.5 have a privilege elevation vulnerability due to improper design. An attacker can trick users into installing a malicious app which can send out HTTP requests and execute JavaScript code in web pages without obtaining the Internet access...

CVE-2017-8153

Huawei VMall (Android) prior to version 1.5.8.5 contains a privilege-elevation vulnerability due to improper design. An attacker can trick a user into installing a malicious app that can send HTTP requests and execute JavaScript in web pages without Internet permission, potentially causing resour...

To bypass youdao cloud notes read password-vulnerability warning-the black bar safety net

My is youdao cloud notes fans, today nothing else to test it Notes a function is a private notebook and read when you need to input to read the password, then we can put the important things into going to be confidential. When you click on the other laptop when a read password of the notebook wil...

用友某通用学习管理系统设计不当致用户信息泄漏(可批量)

简要描述： 已经有大牛呵呵过了，至于是谁..自己猜去 详细说明： WooYun: 某通用型在线学习管理系统存在任意文件上传及任意文件下载漏洞 , WooYun: 某通用型在线学习管理系统存在任意文件上传漏洞（另一种奇葩姿势） 用友的e-Learning，wefgod大牛提交过，这里摘取一下他之前提供的弱口令： 首先需要一个低权限账号登录（反正没有验证码，设定好简单密码，按数字直接丢去暴了都没有问题） 给出几个默认或简单密码的： http://58.214.233.113:8800/lmsv5/ 00041013/123456 00041014/123456...