File Containment Vulnerability in EaseUS Web Authentication System

EaseUS Web Authentication System is a user management system structured in PHP+Mysql. A file inclusion vulnerability exists in EaseUS Web Authentication System. An attacker can exploit this vulnerability to gain server privileges...

Janus Signature Vulnerability in QQ Extreme Edition for Android

QQ Extreme is a chatting and socializing app. A Janus signature vulnerability exists in QQ Extreme Edition for Android. An attacker can exploit the vulnerability to gain server privileges...

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

Design/Logic Flaw

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

Multiple Intel® Server Elevation of Privilege Vulnerabilities

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Multiple Intel® Server elevation of privilege vulnerability can be exploited by an attacker to escalate privileges via local access...

File upload vulnerability in Waychar enrollment system (CNVD-2021-10502)

Waychar Registration System is an online registration system developed for sporting events and other general purpose activities. A file upload vulnerability exists in the Waychar registration system, which can be exploited by an attacker to upload a webshell and gain server privileges...

Niushop community group buy suffers from a file upload vulnerability

Niushop Community Group Buying is a group buying system that allows you to quickly set up a community group buying/community program and quickly launch your online and offline business. A file upload vulnerability exists in Niushop Community Group Buying, which can be exploited by an attacker to...

File Upload Vulnerability in Nanjing Guanbang Network Technology Co.

Nanjing Guanbang Network Technology Co., Ltd. was founded in September 2004, is a private software enterprise through the Jiangsu Provincial Information Industry Department of double-soft recognition. It is mainly engaged in the research and development and sales of education and teaching softwar...

Command Execution Vulnerability in Wave ClusterEngine

Wave ClusterEngine is a cluster management software developed by Wave. A command execution vulnerability exists in Wave ClusterEngine. An attacker can exploit this vulnerability to gain server privileges...

File Upload Vulnerability in BenQ Order Management Platform of Chongqing BenQ Software Co.

Chongqing BenYi Software Co., Ltd. is an authorized marketing service organization under Kingdee International Software Group. It is mainly engaged in sales, implementation and after-sales service of Kingdee software. There is a file upload vulnerability in the order management platform of...

CVE-2020-12148

A command injection flaw identified in the nslookup API in Silver Peak Unity ECOSTM ECOS appliance software could allow an attacker to execute arbitrary commands with the privileges of the web server running on the EdgeConnect appliance. An attacker could exploit this vulnerability to establish a...

Netrend World Intelligence (Intelligence) File Upload Vulnerability in Intelligent Tire Monitoring Management System of Netrend World (Beijing) Intelligent Technology Co.

Ltd. is a technology-based enterprise focusing on the Internet of Things IoT for commercial vehicle tires, the first smart tire co-development unit in China, with a number of invention patents and software copyrights, and has obtained the CE of the European Union and the FCC certification of Nort...

Command execution vulnerability exists in UCMS (CNVD-2020-71677)

UCMS is a simple open source content management system. UCMS suffers from a command execution vulnerability that can be exploited by attackers to gain server privileges...

File Upload Vulnerability in Fishy CMS Backend Data Backup Branch

FishLeap CMS is a content management system specifically geared towards enterprise applications. A file upload vulnerability exists in the backend data backup of Fishy CMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File upload vulnerability in MCMS frontend up***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS frontend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

CVE-2020-0578

Improper conditions check for IntelR Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

File upload vulnerability in Sy***.cl***.php file in XYHCMS backend

XYHCMS Xingyunhai CMS is a completely open source CMS content management system. XYHCMS backend Sy.cl.php file file upload vulnerability. Allow attackers to upload webshell and gain server privileges...

CVE-2019-1010259

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.userchpass function from the MySQL module for Salt. The attack vector is: specially crafted...

Doccms 2016 has a file upload vulnerability

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is the industry's leading free open source enterprise website building system, enterprise website generation system. Doccms 2016 has a file upload...