File Upload Vulnerability in EBCMS

EBCMS short for EBCMS is a modular plug-in website management system based on PHP+Mysql. EBCMS has a file upload vulnerability that can be exploited by attackers to gain control of the web server...

D Shield suffers from a webshell bypass vulnerability (CNVD-2020-01325)

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to gain control of the target server...

IBM Cloud Pak System Arbitrary File Upload Vulnerability

IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. The product supports deploying, managing and moving application environments across hybrid clouds. An arbitrary file upload vulnerability exists in IBM Cloud Pak System. An...

Webshell Bypass Vulnerability in D-Shield Firewalls

D-Shield Firewall is a free IIS firewall software, which protects websites and servers from intrusion. D-Shield Firewall has a webshell bypass vulnerability, which can be exploited by attackers to gain control of the target server...

Watch Out IT Admins! Two Unpatched Critical RCE Flaws Disclosed in rConfig

If you're using the popular rConfig network configuration management utility to protect and manage your network devices, here we have an important and urgent warning for you. A cybersecurity researcher has recently published details and proof-of-concept exploits for two unpatched, critical remote...

D Shield suffers from a webshell bypass vulnerability (CNVD-2019-43635)

D-Shield is a proactive defense software designed specifically for IIS to prevent websites and servers from being compromised by internal and external protection. D-Shield suffers from a webshell bypass vulnerability, which can be exploited by attackers to gain control of the target server...

File Upload Vulnerability in Cicada Knowledge Enterprise Portal System

Cicada Knowledge Enterprise Portal System is an enterprise portal system designed for enterprise marketing use. A file upload vulnerability exists in Cicada Knowledge Enterprise Portal System, which can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in Z-Blog

Z-Blog is an open source program based on Asp and PHP platforms. Z-Blog has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

CVE-2019-5129

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

CVE-2019-5128

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

Command injection

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

Command injection

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

Command injection

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

CVE-2019-5128

CVE-2019-5128 affects YouPHPTube Encoder (v2.3) with unauthenticated command injection via the base64Url parameter in /objects/getImageMP4.php, enabling remote code execution and potential full server compromise. Multiple connected sources (Talos, Nuclei templates, and CNVD/Red Hat/NVD entries) c...

CVE-2019-5127

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Encoder 2.3 a plugin for providing encoder functionality in YouPHPTube. The parameter base64Url in...

CVE-2019-5127

YouPHPTube Encoder 2.3 is vulnerable to unauthenticated command injections via the base64Url parameter in /objects/getImage.php (also seen in related endpoints such as getImageMP4.php and getSpiritsFromVideo.php). Exploitation can lead to remote code execution and full server compromise. The TALO...

File Upload Vulnerability in OneBase

OneBase is an open source, fast and simple, object-oriented application development architecture based on ThinkPHP5. A file upload vulnerability exists in OneBase, which can be exploited by an attacker to gain control of the web server...

WordPress Vernissage theme elevation of privilege vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Vernissage theme is a photography showcase website theme plugin used in it. WordPress Vernissage theme has an elevation of privilege...

WordPress Pont theme elevation of privilege vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Pont theme is a multi-purpose website theme plugin used in it. An elevation of privilege vulnerability exists in WordPress Pont theme. ...