File inclusion vulnerability in WeiPHP pl***.cl***.php file at Shenzhen Yuanmeng Cloud Technology Co.

WeiPHP is an open source WeChat public platform development framework, can easily build a personal WeChat public account operation platform. Shenzhen Yuanmeng Yun Technology Co., Ltd WeiPHP pl.cl.php file file contains a file inclusion vulnerability that can be exploited by an attacker to gain...

File Upload Vulnerability in Multiple Systems of Anhui KU Aorui Technology Co.

Ltd. is a company dedicated to the development of teaching and management software for universities and colleges, the development of experimental instruments, and the provision of management overall design and solutions for teaching and research institutions. A file upload vulnerability exists in...

File Upload Vulnerability in Bole Card Issuing System of Zunyi Xintengda Information Technology Co.

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. A file upload vulnerability exists in Zunyi Xintengda Information Technology Co., Ltd.'s Bole hairpin system, which can be exploited by an attacker to gain control of a...

TuziCMS v3.0 do***_fe*** has command execution vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 dofe has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

TuziCMS v3.0 do***_mb*** has command execution vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 domb has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Multiple vulnerabilities in Zenphoto

Overview Zenphoto is a content management system CMS. Zenphoto contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5592 Code Injection CWE-94 - CVE-2020-5593 Tomohisa Maeda of Panasonic Corporation, Product Security Center reported this vulnerability to IPA...

File upload vulnerability exists in uublog (CNVD-2020-33969)

uublog is a lightweight PHP blog system source code developed in PHP + MySQL. uublog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

The Bondnet Army

Guardicore Labs has recently picked up Bondnet, a botnet of thousands of compromised servers of varying power. Managed and controlled remotely, the Bondnet is currently used to mine different cryptocurrencies and is ready to be weaponized immediately for other purposes such as mounting DDoS attac...

freerdp: Out-of-bounds write in interleaved.c

A flaw was found in FreeRDP between versions 1.0 and 2.0.0. An out-of-bounds memory write was found in the interleaved.c function which could allow an attacker to take over and control the RDP server, including data sent to the client. The highest threat from this vulnerability is to data...

File Upload Vulnerability in Aiwo Real Estate System

Love nest real estate system is based on the second development of the intimate cat v4.7, specifically for the real estate industry customized set of systems. There is a file upload vulnerability in AiWo Real Estate System, which can be exploited by attackers to gain control of the web server...

MCMS suffers from a file upload vulnerability (CNVD-2020-38496)

MCMS is a website building system of MINGFEI TECHNOLOGY CO. MCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

Command execution vulnerability exists in imcat (CNVD-2020-31504)

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A command execution vulnerability exists in imcat. An attacker can exploit the vulnerability to gain control of the server...

File upload vulnerability in imcat

Intimate Cat imcat is a general-purpose website system designed in PHP+MySQL architecture. A file upload vulnerability exists in imcat. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

File upload vulnerability exists in BeyongCms (CNVD-2020-31490)

BeyongCms is a content management system based on ThinkPHP 5.1 framework. A file upload vulnerability exists in BeyongCms. An attacker can exploit this vulnerability to upload malicious files and gain administrative privileges on the server...

CVE-2020-10060

In updatehubprobe, right after JSON parsing is complete, objects\1 is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an...

CVE-2020-10060

In updatehubprobe, right after JSON parsing is complete, objects\1 is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an...

Design/Logic Flaw

In updatehubprobe, right after JSON parsing is complete, objects\1 is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an...

CVE-2020-10060 UpdateHub Might Dereference An Uninitialized Pointer

In updatehubprobe, right after JSON parsing is complete, objects\1 is accessed from the output structure in two different places. If the JSON contained less than two elements, this access would reference unitialized stack memory. This could result in a crash, denial of service, or possibly an...

File Upload Vulnerability in OurPHP website builder system

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. A file upload vulnerability exists in the OurPHP website builder system, which can be exploited by attackers to gain control of the web server...

Backend File Upload Vulnerability in phpSQLiteCMS

phpSQLiteCMS is an open source web content management system based on PHP and SQLite. A backend file upload vulnerability exists in phpSQLiteCMS, which can be exploited by attackers to gain control of a web server...