Command Execution Vulnerability in D-Link DIR-846 Router

The DIR-846 is a router from D-Link. A command execution vulnerability exists in the D-Link DIR-846 router that can be exploited by an attacker to gain control of a server...

File upload vulnerability in waychar enrollment system (CNVD-2021-03305)

waychar online registration system, is an online registration system developed for sports events and other general events, supporting public numbers and small programs. A file upload vulnerability exists in the waychar registration system, which can be exploited by attackers to gain control of th...

Ziehl-Abegg OA Security Breach

Zhiyuan Internet Zhiyuan OA is a collaboration management software from China Zhiyuan Internet Company. Due to the unauthorized access to certain interfaces and insufficient filtering of some functions in older versions of Zhiyuan OA, attackers can upload malicious script files without...

Ali Want Want has dll hijacking vulnerability

Ali Want Want is a very good online chat tool. Ali Want Want has a dll hijacking vulnerability that can be exploited by attackers to gain server control privileges...

Qianniu has a dll hijacking vulnerability

Qianniu is a new one-stop seller management background launched by Alibaba Group in order to make it easier for sellers to take care of their stores after the original seller background system has been integrated and technologically upgraded. There is a dll hijacking vulnerability in Qianniu, whi...

Binary Vulnerability in Mitochrome 2.0

Meitu Look 2.0 is the universal picture viewing software. A binary vulnerability exists in Mito Look 2.0, which can be exploited by an attacker to gain control of a server...

DLL hijacking vulnerability exists in Lovecraft Universal Link PC version (CNVD-2021-03523)

Aqiyi Universal Connections for PC is a local player tool from Aqiyi. There is a DLL hijacking vulnerability in Aqiyi Universal Media Player for PC, which can be exploited by attackers to gain control of the server...

Shenzhen DiYuan Technology Co., Ltd D Shield_Firewall has dll hijacking vulnerability

D ShieldFirewall is an active defense protection software designed for IIS. Ltd. D ShieldFirewall has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03279)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A code execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control of t...

Command execution vulnerability in SeaCMS backend (CNVD-2021-03278)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. A command execution vulnerability exists in the backend of SeaCMS. Attackers can use this vulnerability to obtain control o...

Tencent Conference for Windows suffers from dll hijacking vulnerability

Tencent Meeting is an online video cloud meeting software from Tencent. Tencent Conference for Windows suffers from a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Website Building System of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. station building system there is a file...

File upload vulnerability exists in super cms (CNVD-2021-03275)

Super CMS is a content management system. A file upload vulnerability exists in super cms, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in O2OA Unpacked Overwrite

O2OA is based on J2EE architecture, integrated mobile office, smart office, support for private deployment, adaptive load capacity, can largely save the enterprise software development costs based on the AGPL open source enterprise information technology system requirements of custom development...

FasterXML jackson-databind suffers from a command execution vulnerability (CNVD-2021-01852)

FasterXML Jackson is a U.S. FasterXML company for Java data processing tools . jackson-databind is one of the components with data binding capabilities . A command execution vulnerability exists in FasterXML jackson-databind, which can be exploited by an attacker to gain server control privileges...

File Upload Vulnerability in WAC Wireless Controller Software

Sundray WAC is a set of WirelessAccessControl software from Shenzhen Sundray Technology Co. The WAC wireless controller software has a file upload vulnerability that can be exploited by an attacker to upload malicious files to gain server control privileges...

File Upload Vulnerability in RoadFlow Workflow System

RoadFlow is an integrated workflow engine ASP.NET CORE MVC rapid development framework . A file upload vulnerability exists in the RoadFlow workflow system that can be exploited by an attacker to gain control of the server...

PointShield Cloud Player for windows has a dll hijacking vulnerability

DotShield Cloud Player is a specialized player dedicated to playing DotShield Cloud encrypted videos. PointShield Cloud Player for windows has a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

DLL Hijacking Vulnerability in CyberJournal PC Version

Xunfei Voice Notes is a comprehensive cloud-based note-taking software that focuses on voice input, produced by Xunfei. Xunfei Voice Notes for PC has a DLL hijacking vulnerability, which can be exploited by attackers to gain control of the server...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01304)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. WPS Office Professional Edition has a memory corruption vulnerability that can be exploited by attacker...