Arbitrary Client-Side File Disclosure

aiomysql is vulnerable to Arbitrary Client-Side File Disclosure. The vulnerability is due to the client not validating server requests for local files, and attackers can exploit this by running a rogue MySQL server that sends LOADLOCAL packets to request and retrieve arbitrary files from the clie...

Hikvision Access Control 安全漏洞

The Hikvision DS-K1T and Hikvision DS-KH are both a series of access control systems from Hikvision, a Chinese company. A security vulnerability exists in Hikvision Access Control that stems from the presence of unauthorized modifications to the device's network configuration. An attacker could u...