Command Execution Vulnerability in Extreme CMS of Langfang Extreme Network Technology Co.

Extreme CMS is an open source content management system. Ltd. Extreme CMS has a command execution vulnerability that can be exploited by an attacker to gain access to the web server...

Command Execution Vulnerability in UCMS

UCMS is a simple web content management system. A command execution vulnerability exists in UCMS, which can be exploited by an attacker to gain administrative privileges on the server...

Memory Corruption Vulnerability in WPS Office Campus Edition of Zhuhai Kingsoft Office Software Co.

WPS Campus Edition is designed for school teachers and students, embedded with massive educational teaching resources. A memory corruption vulnerability exists in WPS Office Campus Edition of Zhuhai Kingsoft Office Software Co. Ltd, which can be exploited by attackers to gain administrative...

Command Execution Vulnerability in Empire CMS v7.5 Backend

EmpireCMS Empire Content Management System is an open source content management system CMS. A command execution vulnerability exists in the Empire CMS v7.5 backend, which can be exploited by an attacker to gain access to the web server...

PT-2020-3668

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions prior to the fixed version Description An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon...

TPshop open source mall management background Ueditor page file upload vulnerability

TPshop open source mall is developed with the latest version of ThinkPHP shop mall. TPshop open source mall management background Ueditor page file upload vulnerability. Attackers can use this vulnerability to upload webshell, get server privileges...

Arbitrary File Read Vulnerability in CLTPHP Open Source Edition

CLTPHP content management system is an efficient site-building PHP content management system , but also an open source CMS system . CLTPHP open source version of the existence of arbitrary file reading vulnerability , an attacker can exploit the vulnerability to read any file on the server...

File Upload Vulnerability in Enterprise Website Building System of Zibo Shining Network Technology Co. Ltd (CNVD-2020-50745)

Zibo Shining Network Technology Co., Ltd. enterprise station-building system a specialized enterprise station-building solutions for the product. There is a file upload vulnerability in the Zibo Shining Network Technology Co. An attacker can use the vulnerability to upload a webshell and gain...

File Upload Vulnerability in Bludit CMS v3.13.0

Bludit CMS is a foreign multilingual lightweight website CMS system. Bludit CMS v3.13.0 suffers from a file upload vulnerability, which can be exploited by attackers to gain administrative privileges on the server...

Piggy CMS LifeTone O2O website building system has a logic flaw vulnerability

Piggy cms life pass o2o system card coupon o2o, community o2o is a more innovative characteristics of the o2o program source code, the platform is designed to attract fans, growth of the flow of life, is to build a localized life service priority o2o choice. Pig CMS life pass O2O station building...

Unspecified vulnerability in jupyterhub-kubespawner

jupyterhub-kubespawner is a package for spawning single-user laptop servers on Kubernetes clusters. A security vulnerability in versions of jupyterhub-kubespawner prior to 0.12 can be exploited by an attacker to access the default server of another user with the same username...

YCCMS suffers from a file upload vulnerability (CNVD-2020-48966)

YCCMS is a PHP version of a lightweight CMS builder. YCCMS has a file upload vulnerability, which can be exploited by attackers to upload malicious files to gain server control privileges...

Directory traversal

An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sutsrv.exe web application served on TCP port 85 includes user input into a filesystem access without any further validation. This might allow an unauthenticated attacker to read files on the...

WonderCMS Directory Traversal Vulnerability

WonderCMS is a PHP-based content management system. A directory traversal vulnerability exists in WonderCMS, which can be exploited to delete arbitrary files via directory traversal on the operating system using web server access...

Authorization

An issue was discovered in Mattermost Mobile Apps before 1.31.2 on iOS. Unintended third-party servers could sometimes obtain authorization tokens, aka MMSA-2020-0022...

File Upload Vulnerability in SDCMS

Times Web Information Management System abbreviation: SDCMS is a portal system developed with asp+access. A file upload vulnerability exists in SDCMS. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Arbitrary File Upload Vulnerability in Central Rong Technology Development Group Limited's Website Building System

Ltd. is an IT industry solutions and technical services provider, covering mobile application software development, system software development, artificial intelligence, big data and so on, a comprehensive large-scale technical services company. There is an arbitrary file upload vulnerability in...

h1-ctf: [h1-2006 2020] Chained vulnerabilities lead to account takeover

Summary Mårten Mickos lost his account for BountyPay, the new service HackerOne is using to pay bug bounties. In this report I explain how I accessed a customer's account using a log file and bypassed its 2FA validation. I then leverage an open redirect bug to gain access to an internal server an...

File upload vulnerability in BEESCMS backend ad***_pi***_up***.php page

BEESCMS is a scalable content management system CMS based on PHP and MySQL. A file upload vulnerability exists in the adpiup.php page in the BEESCMS backend. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Command Execution Vulnerability in Free Version of Kilo Brokerage Guarantee System

Kile Intermediary is a TP5.1-based intermediary secured transactions system, Kile Intermediary secured transactions system is a professional virtual asset intermediary secured transactions system, the program can be used to do domain names, websites, accounts, small programs, WeChat public number...