Heartland OA 2021 Autumn Real Edition has a file upload vulnerability (CNVD-2021-88620)

HeartTone OA is a versatile and intelligent office application. Heart to Heart OA 2021 Autumn Real Edition has a file upload vulnerability, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in Ruijie Networks - EWEB Network Management System (CNVD-2021-40746)

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A command execution vulnerability exists in the Ruijie Network-EWEB network management system, which can be exploited by an attacke...

Janus Vulnerability in Ali Smart App

Ali Intelligence app is a mobile client made by Alibaba based on its Ali Intelligence IoT platform. Ali Intelligence App has a Janus vulnerability that can be exploited by an attacker to gain control of the server...

EmpireCMS suffers from a command execution vulnerability (CNVD-2021-39306)

EmpireCMS Empire Content Management System is an open source content management system CMS. EmpireCMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command execution vulnerability exists in Yii2 (CNVD-2021-40140)

Yii2 is a component-based PHP framework for rapid development of modern web applications. Yii2 suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Open Virtual Simulation Experimental Teaching Management Platform Software of Beijing Runier Network Technology Co.

Beijing Runier Network Technology Co., Ltd. is a national high-tech enterprise registered in Beijing Haidian Cultural and Educational Industrial Park based on virtual simulation technology and network technology, mainly engaged in the research, development, sales, integration and service of...

Command Execution Vulnerability in Tianrongxin Access Gateway System (CNVD-2021-37544)

Skyrise Technology Group is a provider of network security, big data and cloud services. A command execution vulnerability exists in the Tianrongxin Access Gateway system, which can be exploited by an attacker to gain server control privileges...

File upload vulnerability in Catfish Blog V3.9.0 backend (CNVD-2021-37306)

Catfish Blog is an open source free PHP blog. A file upload vulnerability exists in the backend of Catfish Blog V3.9.0, which can be exploited by an attacker to gain control of the server...

Hebei Nanhao High-tech Development Co., Ltd. online marking system has a file upload vulnerability

Online marking system is an online marking system developed by Hebei Nanhao High-tech Development Co. There is a file upload vulnerability in the online marking system of Hebei Nanhao High-Tech Development Co., Ltd. that can be exploited by attackers to obtain server control privileges...

Cynthia has a command execution vulnerability

Cynthia is an issue management / bug management / task management / project management system. Cynthia suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Super cms v2.39 (CNVD-2021-32174)

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

File Upload Vulnerability in OA Office Management System of Xiamen JDT Technology Development Co.

OA office management system is based on the concept of workflow, so that people within the enterprise to share information easily and quickly, efficiently and collaboratively; change the past complex, inefficient manual office, to achieve rapid and comprehensive information collection, informatio...

File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...

EasyBuilder Pro suffers from a dll hijacking vulnerability (CNVD-2021-05668)

EasyBuilder Pro is a HMI software developed by Wyland. EasyBuilder Pro suffers from a dll hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

File upload vulnerability in waychar enrollment system (CNVD-2021-03305)

waychar online registration system, is an online registration system developed for sports events and other general events, supporting public numbers and small programs. A file upload vulnerability exists in the waychar registration system, which can be exploited by attackers to gain control of th...

Local Privilege Vulnerability in VMware Antivirus Software

Ltd. was founded in 1996, is a professional anti-virus vendor with strong comprehensive strength in China, and is a high-tech software enterprise integrating the research and development, production, sales and after-sales service of anti-virus software. A local privilege extraction vulnerability...

File Upload Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file upload vulnerability exists in MetInfo Enterprise CMS, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in the Backend of Code Ant Achievement Management System

Code Ant Achievement Management System is an elementary school achievement statistics system that focuses on optimizing achievement collection methods and enriching the dimensions of achievement analysis. A file upload vulnerability exists in the backend of Code Ant Achievement Management System,...