CVE-2020-9236

There is an improper interface design vulnerability in Huawei product. A module interface of the impated product does not deal with some operations properly. Attackers can exploit this vulnerability to perform malicious operatation to compromise module service. Vulnerability ID: HWPSIRT-2020-0501...

LemonLDAP::NG Security Vulnerability

LemonLDAP::NG is LemonLDAP::NG open source set of Web single sign-on and access management software. A security vulnerability exists in LemonLDAP::NG that stems from cross-site request forgery during the 2FA registration process, which could lead to a victim performing a malicious operation...

IBM CICS TX Standard Web UI Cross-Site Request Forgery Vulnerability

IBM CICS TX Standard is a comprehensive single-transaction runtime package from International Business Machines IBM that provides a cloud-native deployment model for standalone applications. A cross-site request forgery vulnerability exists in the IBM CICS TX Standard Web UI, which can be exploit...

MOXA ioLogik E1200 Series Cross-Site Request Forgery Vulnerability

MOXA ioLogik E1200 Series is a series of general-purpose controllers and I/O devices from MOXA, China. The MOXA ioLogik E1200 Series suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to submit a special request, obtain sensitive information or perform a...

Double free

There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...

World Of Warcraft recruitment: a command line can hijack your game with the hijacking code and video-bug warning-the black bar safety net

! Recently there has been a relates to the social worker, the technology, the new game attack of the Scam, the attacker uses the world of Warcraft World of Warcraft, WoW game plug-in a hidden function. New attacks Imagine this Scene: the game one looks like a well-known Guild members of a role,...

HostBill Email Templates Configuration Page跨站请求伪造漏洞

Bugtraq ID:66009 HostBill是国外Quality Software开发的虚拟主机、VPS云主机、独立主机、域名及附加产品的管理系统。 HostBill Email模版配置页面存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 0 HostBill 厂商补丁： Zimbra ----- HostBill 2014-03-03已经修复该漏洞，建议用户下载更新： http://hostbillapp.com/changelog...

WordPress Post to PDF 'options.php'跨站脚本漏洞

Bugtraq ID:65823 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress Post to PDF插件'options.php'不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress Post to PDF 2.3.1 目前没有详细解决方案提供： http://wordpress.org/plugins/...