Command Execution Vulnerability in Apabi Reader (Windows Client)

Apabi Reader is a domestic free non-open source e-books and electronic documents reading software, is the only reader of CEBX, CEB documents, and can be used to read PDF, HTM, HTML format documents. A command execution vulnerability exists in Apabi Reader Windows client, which can be exploited by...

Command Execution Vulnerability in the Standard Edition of Xunjie CAD Editor

Xunjie CAD Editor Standard Edition is an application for drawing DWG format file editing software, mainly for DWG, DXF and other file formats drawings to provide browsing, editing functions. A command execution vulnerability exists in XunJie CAD Editor Standard Edition, which can be exploited by ...

Command Execution Vulnerability in Fast Camel Accelerator (Windows Client)

Fast Camel Accelerator is a cross-border product of Wenzhou Yuntong Numerical Network Technology Co. The product can facilitate the user to quickly connect to the overseas private network, to meet the user to access the huge amount of information material, targeted acceleration for specific sites...

CVE-2020-14773

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14809

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14845

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14799

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2020-14786

Removed by vendor...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59410)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

Command Execution Vulnerability in PDF Reader on Cloud

Cloud PDF Reader is a PDF reading and editing software. A command execution vulnerability exists in PDF Reader on Cloud, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in Silver Whiteboard PC Client Software

The Silver Whiteboard is an interactive teaching tool. A command execution vulnerability exists in the XIVO Whiteboard pc client software, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in YouDianCMS v9.0

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS v9.0 has a file upload vulnerability, which can be exploited by attackers to gain...

Command Execution Vulnerability in BayCloud CMS

Beyun cms content management system is an open source content management system based on tp5.1. Beyuncms has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in CAJViewer of China Academic Journals (CD-ROM Version) Electronic Magazine Company Limited (CNVD-2020-61894)

CAJViewer is a specialized viewer for reading and editing literature in the CNKI series of databases. A command execution vulnerability exists in CAJViewer of China Academic Journals CD-ROM Version Electronic Magazine Co. Ltd. that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in NetEase Email Master PC Client Software

Netease Mailbox Master is an all-platform mailbox client launched by Netease Netease, which supports the use of various brands of mailboxes such as Netease and Outlook, and supports all-platform device login. Netease Email Master pc client software has a command execution vulnerability that can b...

Tianjin XunReader Technology Co., Ltd. XunReader PDF Command Execution Vulnerability

Read PDF Master is a professional PDF viewing tool. Tianjin XunReader Technology Co., Ltd. XunReader PDF there is a command execution vulnerability, an attacker can use this vulnerability in the client process to inject executable DLL file to obtain control of the server...

File upload vulnerability in TWCMS backend se***_co***.cl***.php file

TWCMS Tong Wang CMS is an enterprise website CMS system. A file upload vulnerability exists in the seco.cl.php file in the background of TWCMS. An attacker can exploit the vulnerability to write arbitrary files and gain server privileges...

File Inclusion Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

Spring-webmvc command execution vulnerability in hessian-based remote service calls

spring-webmvc is a java development framework. A command execution vulnerability exists in spring-webmvc's hessian-based remote service invocation, which can be exploited by an attacker to gain control of the server...

U.S. Dept Of Defense: SQLi in login form of █████

Summary The following is vulnerable to a sqli, due to a limited char set this is t██████████y to demonstrate and not picked up by sqlmap. POST /██████████.asp HTTP/█████.████ Host: ███████ Description POST /██████.asp HTTP/████.███ Host: █████ Connection: close Content-Length: 45 Cache-Control:...