WordPress Ultimate Member plugin <= 2.5.0 - Auth. Directory Traversal vulnerability

Auth. Directory Traversal vulnerability discovered by Ruijie Li in the WordPress Ultimate Member plugin versions = 2.5.0. Solution Update the WordPress Ultimate Member plugin to the latest available version at least 2.5.1...

USN-5701-1: Jinja2 vulnerability

Yeting Li discovered that Jinja2 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service...

WordPress Ultimate Member plugin <= 2.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Ruijie Li in WordPress Ultimate Member plugin versions = 2.3.2. Solution Update the WordPress Ultimate Member plugin to the latest available version at least 2.4.0...

WordPress Ultimate Member plugin <= 2.3.1 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Ruijie Li in WordPress Ultimate Member plugin versions = 2.3.1. Solution Update the WordPress Ultimate Member plugin to the latest available version at least 2.3.2...

WordPress AGIL plugin <= 1.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Chuang LI in WordPress AGIL plugin versions = 1.0. Solution Deactivate and delete. This plugin has been closed as of March 31, 2022 and is not available for download. This closure is temporary, pending a full review...

USN-5307-1: QEMU vulnerabilities

Gaoning Pan discovered that QEMU incorrectly handled the floppy disk emulator. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2021-20196 Gaoning Pan discovered that the QEMU vmxnet3 NIC emulator incorrectly handled certain values. A...

WordPress Simple Schools Staff Directory plugin <= 1.1 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Chuang Li in WordPress Simple Schools Staff Directory plugin versions = 1.1. Solution This plugin has been closed as of October 24, 2019 and is not available for download. Reason: Guideline Violation...

SQL Injection Vulnerability in the Website Building System of Jereh Information Business Limited

Jereh Information Business Limited is a company that has completed thousands of corporate websites, e-commerce websites, event websites, as well as a variety of function-specific programs and apps for thousands of companies and organizations. A SQL injection vulnerability exists in the website...

Exploit for CVE-2021-1675

CVE-2021-1675PrintNightmare system shell poc for CVE-2021-16...

Lex Li vscode-restructuredtext access control error vulnerability

Lex Li vscode-restructuredtext is a Lex Li open source application. This extension provides rich reStructuredText language support for Visual Studio Code.An access control error vulnerability exists in versions prior to Lex Li vscode-restructuredtext 146.0.0, which stems from the inclusion of an...

SQL Injection Vulnerability in Mingxin Sunshine Procurement Management Platform li***.do Page

Mingxin Sunshine Procurement Management Platform is dedicated to creating e-procurement solutions for enterprises. A SQL injection vulnerability exists in the li.do page of Mingxin Sunshine Procurement Management Platform. An attacker can use this vulnerability to obtain sensitive information fro...

Lee Lei's blog ne***_sh***.php file suffers from SQL injection vulnerability (CNVD-2020-48639)

Li Lei blog is an open source PHP blog management system . Li Lei blog nesh.php file suffers from SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive information in the database...

Lee Lei's blog ne***_sh***.php page suffers from a SQL injection vulnerability

Li Lei blog is an open source PHP blog management system . Li Lei blog nesh.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Li Lei's Blog gi***.php Page

Li Lei blog is an open source PHP blog management system . Li Lei blog gi.php page SQL injection vulnerability, an attacker can exploit the vulnerability to obtain sensitive database information...

Li Lei's blog suffers from SQL injection vulnerability (CNVD-2020-47313)

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

Li Lei's blog has a file upload vulnerability

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

SQL injection vulnerability in li***.php page of Qingdao Shangzhixin Network Technology Co.

Qingdao Business to letter network technology limited company is a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services of high-tech specialized companies. Ltd. enterprise website building system li.php page SQL injection...

SQL injection vulnerability in the file li****.php of the website building system of Qingdao Shangzhixin Network Science and Technology Co.

Qingdao Business to letter network technology limited company is a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services of high-tech specialized companies. There is a SQL injection vulnerability in the file li.php of the website...

SQL Injection Vulnerability in li***.asp page of website building system of Nanjing Xubu Network Technology Co.

Nanjing Xubu Network Technology Co., Ltd. is an Internet solution provider. The system li.asp page of Nanjing Xubu Network Technology Co., Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Li Lei's blog suffers from SQL injection vulnerability (CNVD-2020-32567)

Li Lei blog is an open source PHP blog management system . Li Lei Blog has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...