Command Execution Vulnerability in D-Link DIR-846 Router

The DIR-846 is a router from D-Link. A command execution vulnerability exists in the D-Link DIR-846 router that can be exploited by an attacker to gain control of a server...

Ziehl-Abegg OA Security Breach

Zhiyuan Internet Zhiyuan OA is a collaboration management software from China Zhiyuan Internet Company. Due to the unauthorized access to certain interfaces and insufficient filtering of some functions in older versions of Zhiyuan OA, attackers can upload malicious script files without...

Qianniu has a dll hijacking vulnerability

Qianniu is a new one-stop seller management background launched by Alibaba Group in order to make it easier for sellers to take care of their stores after the original seller background system has been integrated and technologically upgraded. There is a dll hijacking vulnerability in Qianniu, whi...

Ali Want Want has dll hijacking vulnerability

Ali Want Want is a very good online chat tool. Ali Want Want has a dll hijacking vulnerability that can be exploited by attackers to gain server control privileges...

Shenzhen DiYuan Technology Co., Ltd D Shield_Firewall has dll hijacking vulnerability

D ShieldFirewall is an active defense protection software designed for IIS. Ltd. D ShieldFirewall has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

DLL hijacking vulnerability exists in Lovecraft Universal Link PC version (CNVD-2021-03523)

Aqiyi Universal Connections for PC is a local player tool from Aqiyi. There is a DLL hijacking vulnerability in Aqiyi Universal Media Player for PC, which can be exploited by attackers to gain control of the server...

Tencent Conference for Windows suffers from dll hijacking vulnerability

Tencent Meeting is an online video cloud meeting software from Tencent. Tencent Conference for Windows suffers from a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

Binary Vulnerability in Mitochrome 2.0

Meitu Look 2.0 is the universal picture viewing software. A binary vulnerability exists in Mito Look 2.0, which can be exploited by an attacker to gain control of a server...

File upload vulnerability exists in super cms (CNVD-2021-03275)

Super CMS is a content management system. A file upload vulnerability exists in super cms, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in O2OA Unpacked Overwrite

O2OA is based on J2EE architecture, integrated mobile office, smart office, support for private deployment, adaptive load capacity, can largely save the enterprise software development costs based on the AGPL open source enterprise information technology system requirements of custom development...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03279)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A code execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control of t...

File Upload Vulnerability in Website Building System of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. station building system there is a file...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03278)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A command execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control o...

FasterXML jackson-databind suffers from a command execution vulnerability (CNVD-2021-01852)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A command execution vulnerability exists in FasterXML jackson-databind, which can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in WAC Wireless Controller Software

Sundray WAC is a set of WirelessAccessControl software from Shenzhen Sundray Technology Co. The WAC wireless controller software has a file upload vulnerability that can be exploited by an attacker to upload malicious files to gain server control privileges...

PDF Complete v3.5.310 suffers from a local elevation of privilege vulnerability

PDF Complete is a PDF editor. PDF Complete v3.5.310 suffers from a local elevation of privilege vulnerability that can be exploited by an attacker to gain control of the server...

PointShield Cloud Player for windows has a dll hijacking vulnerability

DotShield Cloud Player is a specialized player dedicated to playing DotShield Cloud encrypted videos. PointShield Cloud Player for windows has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Laiku Push E-commerce System (CNVD-2021-01290)

Laike Push www.laiketui.com is a mall system and mall website construction provider for enterprise-level businesses to provide retail mall, B2B2C multi-user mall system, community group-buying mall system, micro letter distribution system, small program mall, micro distribution system and other...

Command Execution Vulnerability in Cscms

Cheng's CMS-cscms is a diversified content management system, using PHP5+MYSQL as the technical basis for development, using the OOP object-oriented approach to build the basic operational framework. Cscms has a command execution vulnerability that can be exploited by attackers to gain control of...

FTSE for Windows suffers from a DLL Hijacking Vulnerability

Futura Bull is a free software for trading Hong Kong stocks. A DLL hijacking vulnerability exists in FTNB for Windows, which can be exploited by attackers to gain control of the server...