TOTOLINK EX1200T 安全漏洞

The TOTOLINK EX1200T is a dual-band wireless signal amplifier that is primarily used to extend the coverage of an existing wireless network. A code execution vulnerability exists in the TOTOLINK EX1200T. The vulnerability stems from the FileName parameter in the setUpgradeFW function for...

Apache OFBiz Code Injection Vulnerability

Apache OFBiz is the United States Apache Apache Foundation of a set of enterprise resource planning ERP system. The system provides a suite of Java-based web application components and tools. A code injection vulnerability exists in Apache Ofbiz versions prior to 18.12.10, which stems from the...

Sophos Web Appliance 命令注入漏洞

Sophos Web Appliance is a firewall from Sophos. A security vulnerability exists in Sophos Web Appliance versions prior to 4.3.10.4 that stems from the presence of a pre-authorized command injection vulnerability that allows execution of arbitrary code...

HPE Serviceguard 缓冲区错误漏洞

HPE Serviceguard is a high availability and disaster recovery clustering solution from HPE. A security vulnerability exists in HPE Serviceguard that stems from a pre-authorized memory corruption...

Apache Dubbo code issue vulnerability (CNVD-2023-25935)

Apache Dubbo is the United States Apache Apache Foundation of a lightweight Java-based RPC Remote Procedure Call framework. The product provides interface-based remote calling , fault tolerance and load balancing and automatic service registration and discovery. A code issue vulnerability exists ...

Atlassian Confluence Server 安全漏洞

Atlassian Confluence Server is the server version of a suite of collaboration software from Atlassian Australia with enterprise knowledge management capabilities and support for building enterprise WiKi. A security vulnerability exists in Atlassian Confluence Server that allows remote attackers t...

Wireless IP Camera (P2P) WIFICAM Pre-Authorized Remote Command Execution Vulnerability

Wireless IP Camera P2P WIFICAM is a wireless IP camera. Wireless IP Camera P2P WIFICAM pre-authorized remote command execution vulnerability. By accessing a URL link with special parameters, an attacker can root user privileges to bypass the authentication process and execute various code on the...

Nexpose Scan Engine on the AWS Marketplace

Rapid7 is excited to announce that you can now find a Nexpose Scan Engine AMI on the Amazon Web Services Marketplace making it simple to deploy a pre-authorized Nexpose Scan Engine from the AWS Marketplace to scan your AWS assets! What is an AMI ? An Amazon Machine Image AMI allows you to launch ...