Code injection

The Microchip RN4870 module firmware 1.43 and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112 mishandles reject messages...

PT-2022-27855 · Microchip · Rn4870 +1

Name of the Vulnerable Software and Affected Versions: Microchip RN4870 module firmware version 1.43 Microchip PIC LightBlue Explorer Demo version 4.2 DT100112 Description: The issue is related to the mishandling of reject messages in the firmware. There is no information provided about the...

Cross site scripting

Cross Site Scripting XSS vulnerability in Users.php in eyoucms 1.5.4 allows remote attackers to run arbitrary code and gain escalated privilege via the filename for editusersheadpic...

CVE-2022-44087

ESPCMS P8.21120101 was discovered to contain a remote code execution RCE vulnerability in the component UPFILEPICZOOMHIGHT...

EARCLINK ESPCMS 安全漏洞

Honghu Erchuang Netlink Information Technology EARCLINK ESPCMS is an enterprise website building system from Honghu Erchuang Netlink Information Technology, China. A security vulnerability exists in EARCLINK ESPCMS version P8.21120101, which originated from the discovery of a Remote Code Executio...

Koh - The Token Stealer

Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, see t...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45901)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter at /admin.php/pic/admin/pic/del for external...

CVE-2022-29632

An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file...

Sql injection

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan...

Sql injection

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/save...

Sql injection

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/plsave...

Roncoo Education 代码问题漏洞

Roncoo Education is an online education platform from China-based Roncoo. A security vulnerability exists in Roncoo Education version v9.0.0, which stems from an arbitrary file upload issue in the /course/api/upload/pic component. An attacker can exploit the vulnerability to execute arbitrary cod...

CVE-2022-27083

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic...

The vulnerability of the Flexible PIC Concentrator module in Juniper Networks’ Junos OS-based ACX5448 routers allows a hacker to induce a service failure.

The vulnerability of the Flexible PIC Concentrator FPC module in Juniper Networks’ Junos OS-based ACX5448 routers lies in the fact that resources are not released after their useful life has expired. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2022-22178

A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause ...

Stack overflow

A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service DoS. Continued receipt of these specific packets will cause ...

Juniper Networks Junos OS 资源管理错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A resource management error vulnerability exists in the Juniper Networks Junos OS, which arises from an uncontrolled...

PT-2022-1474 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on ACX5448 versions 18.4 through 18.4R3-S10 Juniper Networks Junos OS on ACX5448 versions 19.1 through 19.1R3-S5 Juniper Networks Junos OS on ACX5448 versions 19.2 through 19.2R1-S8 Juniper Networks Junos OS on ACX54...

Juniper Junos OS Vulnerability (JSA11284)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11284 advisory. - A Stack-based Buffer Overflow vulnerability in the flow processing daemon flowd of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networke...

CVE-2021-43550

The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communications between Patient Information Center iX PIC iX Versions C.02 and C.03 and Efficia CM Series Revisions A.01 to C.0x and 4.0...