Memory corruption vulnerability exists in WPS Office International Edition of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2020-41840)

Kingsoft WPS is Kingsoft Office Software office software, you can realize the office software commonly used text, forms, presentations and other functions. Zhuhai Kingsoft Office Software Co., Ltd. WPS Office international version of the existence of memory corruption vulnerability, attackers can...

Memory corruption vulnerability exists in WPS Office International Edition of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2020-41839)

Kingsoft WPS is Kingsoft Office Software office software, you can realize the office software commonly used text, forms, presentations and other functions. Zhuhai Kingsoft Office Software Co., Ltd. WPS Office international version of the existence of memory corruption vulnerability, attackers can...

Memory Corruption Vulnerability in WPS Office International Edition of Zhuhai Kingsoft Office Software Co. Ltd (CNVD-2020-41836)

Kingsoft WPS is Kingsoft Office Software office software, you can realize the office software commonly used text, forms, presentations and other functions. Zhuhai Kingsoft Office Software Co., Ltd. WPS Office international version of the existence of memory corruption vulnerability, attackers can...

Code Execution Vulnerability in Advantech WebAccessNode

Advantech WebAccessNode is a fully Internet Explorer based HMI/SCADA monitoring software. A code execution vulnerability exists in Advantech WebAccessNode, which can be exploited by an attacker to gain server administrator privileges...

Advantech WebAccessNode Code Execution Vulnerability in Advantech Technology (China) Co.

Advantech China Co., Ltd. is a global manufacturer in the intelligent system industry. A code execution vulnerability exists in Advantech WebAccessNode of Advantech Technology China Co. Ltd. that can be exploited by an attacker to gain server administrator privileges...

SimplePHPGal 0.7 - Remote File Inclusion Vulnerability

Exploit for php platform in category web applications Title: SimplePHPGal 0.7 - Remote File Inclusion Author: h4shur Vendor Homepage: https://johncaruso.ca Software Link: https://johncaruso.ca/phpGallery/ Software Link: https://sourceforge.net/projects/simplephpgal/ Tested on: Windows 10 & Google...

File Upload Vulnerability in CRMEB Open Edition V3.1.0

CRMEB mall system is based on ThinkPhp6.0 + Vue development of a set of new retail mobile e-commerce system, CRMEB system is a set of customer relationship management + marketing e-commerce system, can quickly accumulate customers, member data analysis, intelligent conversion of customers,...

Code Execution Vulnerability in CRMEB Open Edition V2.6.13

CRMEB system is a set of customer relationship management + marketing e-commerce system, can really help enterprises based on WeChat public number, small program, to realize the member relationship management, data analysis, accurate marketing e-commerce management system. CRMEB Open Version...

HuCart suffers from a file upload vulnerability (CNVD-2020-25572)

HuCart is a PHP+Mysql based enterprise building system that can run on various server platforms such as Linux and Windows. HuCart has a file upload vulnerability, which can be exploited by attackers to upload malicious files and obtain server administrative privileges...

File Upload Vulnerability in opencart 3.6

OpenCart is an open source e-commerce system. A file upload vulnerability exists in opencart 3.6, which can be exploited by an attacker to execute commands and gain server administrator privileges...

EulerOS 2.0 SP5 : openldap (EulerOS-SA-2019-1914)

According to the version of the openldap packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator delegates rootDN database admin privileges for...

File upload vulnerability in the background ap***_co***.php file of PHPOK enterprise website building system

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the apco.php file in the background of the PHPOK enterprise website system. Remote attackers can use this vulnerability to obtain server administrative privileges...

CVE-2019-3723

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain a web parameter tampering vulnerability. A remote unauthenticated attacker could potentially manipulate parameters of web requests to OMSA to create arbitrary files with empty content or delete th...

CVE-2019-3722

Affected software/Component: Dell EMC OpenManage Server Administrator (OMSA). Vulnerability: XML External Entity (XXE) injection in OMSA prior to 9.1.0.3 and prior to 9.2.0.4. Root cause: XXE vulnerability allowing external entities to be processed in XML requests. Impact: Potential remote read o...

CVE-2019-3722 XML External Entity (XXE) Injection Vulnerability

Dell EMC OpenManage Server Administrator OMSA versions prior to 9.1.0.3 and prior to 9.2.0.4 contain an XML external entity XXE injection vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to read arbitrary server system files by supplying specially...

CVE-2018-4056

An exploitable SQL injection vulnerability exists in the administrator web portal function of coTURN prior to version 4.5.0.9. A login message with a specially crafted username can cause an SQL injection, resulting in authentication bypass, which could give access to the TURN server administrator...

CVE-2017-7357

Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file...

Arbitrary file deletion

Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file...

Dell OpenManage Server Administrator 8.2 ViewFile Directory Traversal

The version of Dell OpenManage Server Administrator OMSA running on the remote web server is affected by a directory traversal vulnerability due to improper sanitization of user-supplied input to the 'file' parameter in the /ViewFile script. An authenticated, remote attacker who can access an...

Dell OpenManage Server Administrator 8.3 - XML External Entity

!/usr/bin/ruby Exploit Title: Dell OpenManage Server Administrator 8.3 XXE Date: June 9, 2016 Exploit Author: hantwister Vendor Homepage: http://en.community.dell.com/techcenter/systems-management/w/wiki/1760.openmanage-server-administrator-omsa Software Link:...