File upload vulnerability in TWCMS backend se***_co***.cl***.php file

TWCMS Tong Wang CMS is an enterprise website CMS system. A file upload vulnerability exists in the seco.cl.php file in the background of TWCMS. An attacker can exploit the vulnerability to write arbitrary files and gain server privileges...

File Inclusion Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

Spring-webmvc command execution vulnerability in hessian-based remote service calls

spring-webmvc is a java development framework. A command execution vulnerability exists in spring-webmvc's hessian-based remote service invocation, which can be exploited by an attacker to gain control of the server...

U.S. Dept Of Defense: SQLi in login form of █████

Summary The following is vulnerable to a sqli, due to a limited char set this is t██████████y to demonstrate and not picked up by sqlmap. POST /██████████.asp HTTP/█████.████ Host: ███████ Description POST /██████.asp HTTP/████.███ Host: █████ Connection: close Content-Length: 45 Cache-Control:...

Command Execution Vulnerability in DeepService SSL VPNs

DeepSign Technology Corporation is a provider of products, services and solutions focused on enterprise-class security, cloud computing and infrastructure. A command execution vulnerability exists in DeepService SSL VPN. An attacker can exploit the vulnerability to execute arbitrary commands on t...

File Upload Vulnerability in ED01-CMS

ED01-CMS is a content management system. ED01-CMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of a web server...

CVE-2020-15865

A Remote Code Execution vulnerability in Stimulsoft aka Stimulsoft Reports 2013.1.1600.0 allows an attacker to encode C scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server...

CVE-2020-15865

A Remote Code Execution vulnerability in Stimulsoft aka Stimulsoft Reports 2013.1.1600.0 allows an attacker to encode C scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server...

Remote code execution

A Remote Code Execution vulnerability in Stimulsoft aka Stimulsoft Reports 2013.1.1600.0 allows an attacker to encode C scripts as base-64 in the report XML file so that they will be compiled and executed on the server that processes this file. This can be used to fully compromise the server...

Code Execution Vulnerability in ZSITE of Qingdao eEnterprise Tianchuang Management Consulting Co.

ZSITE is an open source free enterprise portal system designed for enterprise marketing. There is a code execution vulnerability in ZSITE, which can be exploited by an attacker to gain control of the web server of Qingdao Yiqi Tianchuang Management Consulting Co...

CloudForms: Out-of-band OS Command Injection through conversion host

An out-of-band OS command injection vulnerability was found in Red Hat CloudForms. An authenticated malicious attacker could execute arbitrary commands on the server by sending a specially crafted request. The highest threat from this vulnerability is to data confidentiality and integrity as well...

CVE-2020-15467

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

Remote code execution

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

CVE-2020-15467

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

CVE-2020-15467

CVE-2020-15467 affects Cohesive Networks vns3:vpn appliances up to and including version 4.11.0; the administrative interface is vulnerable to authenticated remote code execution that can lead to server compromise. CVSSv3.1 base score 8.8 (Network, Low attack complexity, Low privileges required, ...

PT-2020-14434

Name of the Vulnerable Software and Affected Versions Cohesive Networks vns3:vpn appliances versions prior to 4.11.1 Description The administrative interface of the affected appliances is susceptible to authenticated remote code execution, which can result in server compromise. Recommendations Fo...

CVE-2020-15467: Improper Neutralization of Special Elements used in an OS Command

The administrative interface of Cohesive Networks vns3:vpn appliances before version 4.11.1 is vulnerable to authenticated remote code execution leading to server compromise...

File Upload Vulnerability in WCMS

WCMS is a CMS turned editorially oriented editor. WCMS suffers from a file upload vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in SeaCMS (CNVD-2020-48920)

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has a command execution vulnerability that can be exploited by attackers to gain control of a web server...

Arbitrary File Upload Vulnerability in Content Management System of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. is a professional company providing enterprise information construction application and promotion services. The content management system of Nanchang Boran Technology Co., Ltd. suffers from an arbitrary file upload vulnerability, which can be exploited by...