ZDCC VisualField suffers from localized power lifting vulnerability

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. ZDCC VisualField is vulnerable to a local power lifting vulnerability that can be exploited by an attacker to gain control of the server...

UCMS suffers from a file upload vulnerability (CNVD-2020-69467)

UCMS is a content management system written in PHP. UCMS has a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command execution vulnerability in Zendo Enterprise 4.0.3 backend

Zendo Enterprise is a project management software. A command execution vulnerability exists in the backend of Zendo Enterprise Edition 4.0.3, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in LzCMS Content Management System Backend

LzCMS is a blog system developed by ThinkPHP+layui. A file upload vulnerability exists in the background of LzCMS content management system, which can be exploited by attackers to gain control of the web server...

HadSky Light Forum program has a file upload vulnerability

HadSky Light Forum program is a personal original PHP system. The HadSky Light Forum program has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File upload vulnerability in duxcms content management system backend (CNVD-2020-68884)

duxcms is a web content management based on HMVC rules and developed in PHP for SMEs, companies, news, individuals and other related industries. duxcms content management system backend file upload vulnerability, attackers can use the vulnerability to obtain server administrative privileges...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67325)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from file upload vulnerability (CNVD-2020-67324)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Victor CMS suffers from a file upload vulnerability (CNVD-2020-67388)

Victor CMS is a simple content management system. Victor CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Zunyi Xintengda Information Technology Co., Ltd. Bole Card Issuing System Basic Edition Arbitrary File Upload Vulnerability

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. Zunyi Xintengda Information Technology Co., Ltd. Bole hair card system basic version of arbitrary file upload vulnerability, an attacker can use the vulnerability on the...

CVE-2020-26820

SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker who is authenticated as an administrator to use the administrator console, to expose unauthenticated access to the file system and upload a malicious file. The attacker or another user can then use a separate...

Exploit for CVE-2020-14882

CVE-2020-14882 Oracle WebLogic Server Authentication Bypass -...

File Upload Vulnerability in easySite Content Management System

CSCL is a provider of artificial intelligence technology and informatization software and platforms. A file upload vulnerability exists in easySite Content Management System, which can be exploited by attackers to gain control of the server...

Unauthorized Access Vulnerability in Oracle WebLogic

WebLogic is a Java application server from Oracle Corporation. WebLogic is used to develop, integrate, deploy, and manage large-scale distributed Web applications, web applications, and database applications. An unauthorized access vulnerability exists in Oracle WebLogic, which can be exploited b...

SQL Injection Vulnerability in CupCMS

CupCMS is a content management system that integrates video, stars, news, comics, community and more. CupCMS suffers from a SQL injection vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in CRMEB Knowledge Payment System Backend

CRMEB based on ThinkPhp5.0 + Vue + EasyWeChat development of a CRMEB new retail mall system. A file upload vulnerability exists in the backend of CRMEB Knowledge Payment System, which can be exploited by attackers to gain control of the server...

File Upload Vulnerability in S-CMS Enterprise Website Building System (CNVD-2020-65194)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a file upload vulnerability in S-CMS, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Swift Text-to-Speech Software

Swift Text to Speech Software is a speech synthesis software that converts text to speech. It is suitable for a variety of scenarios such as shopping mall store advertisements, audio production, audible reading and so on. A command execution vulnerability exists in Swift Text to Speech Software,...

CVE-2020-14760

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Command Execution Vulnerability in Fast Camel Accelerator (Windows Client)

Fast Camel Accelerator is a cross-border product of Wenzhou Yuntong Numerical Network Technology Co. The product can facilitate the user to quickly connect to the overseas private network, to meet the user to access the huge amount of information material, targeted acceleration for specific sites...