CMS Made Simple 2.2.15 Remote Command Execution

Exploit Title: CMS Made Simple 2.2.15 - RCE Authenticated Author: Andrey Stoykov Vendor Homepage: https://www.cmsmadesimple.org/ Software Link: https://www.cmsmadesimple.org/downloads/cmsms Version: 2.2.15 Tested on: Debian 10 LAMPP Exploit and Detailed Info:...

UFIDA NC suffers from SQL injection vulnerability (CNVD-2020-69451)

UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA Network Technology Co. Founded in 1988, UFIDA is an advanced global provider of cloud services, software, and financial services for enterprises and public organizations. An arbitrary file read vulnerability exists in the UFIDA NC-IUFO Reporting System, which can be exploited by attackers t...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64774)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A SQL injection vulnerability exists in NC Cloud of UFIDA Network...

Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64879)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A command execution vulnerability exists in NC Cloud of UFIDA...

Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64878)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A command execution vulnerability exists in NC Cloud of UFIDA...

Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64775)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A command execution vulnerability exists in NC Cloud of UFIDA...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64771)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

Nextcloud Server < 17.0.7, 18.x < 18.0.5 Cryptographic Vulnerability (NC-SA-2020-023)

Nextcloud Server is prone to a cryptographic vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : nextcloud (openSUSE-2020-1652)

This update for nextcloud fixes the following issues : nextcloud version 20.0.0 fix some security issues : - NC-SA-2020-037 PIN for passwordless WebAuthm is asked for but not verified - NC-SA-2020-033 CVE-2020-8228 Missing rate limit on signup page - NC-SA-2020-029 CVE-2020-8233, boo1177346...

wolfware.ncsu.edu Open Redirect vulnerability OBB-1355589

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

XML Entity Injection Vulnerability in UFIDA NC Cloud at UFIDA Network Technology Co.

NC Cloud is a large-scale enterprise digitalization platform, focusing on digital management, digital operation and digital business, helping large-scale enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in UFI...

Memory Leak in OCUtil.dll library in Desktop client can lead to DoS (NC-SA-2020-034)

A memory leak in the OCUtil.dll library used by Nextcloud Desktop Client 2.6.4 can lead to a DoS against the host system...

File Upload Vulnerability in UFIDA NC Cloud

UFIDA NC Cloud is a digital cloud platform for large enterprises, serving large enterprises in business innovation, management change and digital transformation. A file upload vulnerability exists in UFIDA NC Cloud. An attacker can exploit the vulnerability to upload a webshell and gain server...

CVE-2020-13224

TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices through 1.5.3 build200401, and NC450 devices through 1.5.4 buil...

Buffer overflow

TP-LINK NC200 devices through 2.1.10 build 200401, NC210 devices through 1.0.10 build 200401, NC220 devices through 1.3.1 build 200401, NC230 devices through 1.3.1 build 200401, NC250 devices through 1.3.1 build 200401, NC260 devices through 1.5.3 build200401, and NC450 devices through 1.5.4 buil...

Remote Code Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC V6.5 is UFIDA Software's main Internet platform-based ERP system. A remote code execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC products are world-class high-end management software for group enterprises. A command execution vulnerability exists in UFIDA NC, which can be exploited by attackers to gain server control privileges...

Possible denial of service when entering a long password (NC-SA-2020-028)

Improper check of inputs in Preferred providers app 1.6.0 allowed to perform a denial of service attack when using a very long password...