PT-2019-14366

Name of the Vulnerable Software and Affected Versions SITOS six Build version 6.2.1 Description The issue allows an attacker to inject arbitrary PHP commands, potentially compromising the running server and enabling the execution of system commands in the context of the web user. Recommendations...

Vulnerability of the _libssh2_transport_read function in the libssh2 library, which allows a hacker to execute arbitrary code

The vulnerability of the libssh2transportread function in the libssh2 library is related to integer overflow during packet reading from the server. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using the compromised SSH server...

File Upload Vulnerability in Luthor's All Media Platform

Luthor's all-media platform is a comprehensive realization of the integration of media collection, editing, distribution and storage, and provides media users with an efficient work platform that can replace the current collection and editing system, solve the media process, and provide more...

File Upload Vulnerability in zzcms

zzcms is a content management system CMS by zzcms team in China. A file upload vulnerability exists in zzcms, which can be exploited by an attacker to gain control of the web server...

File upload vulnerability exists in zzcms (CNVD-2019-37684)

zzcms is a content management system CMS by zzcms team in China. A file upload vulnerability exists in zzcms, which can be exploited by an attacker to gain control of the web server...

CVE-2019-15131

In Code42 Enterprise 6.7.5 and earlier, 6.8.4 through 6.8.8, and 7.0.0 a vulnerability has been identified that may allow arbitrary files to be uploaded to Code42 servers and executed. This vulnerability could allow an attacker to create directories and save files on Code42 servers, which could...

Code Execution, Arbitrary File Read Vulnerabilities in RGCMS

RuiGu information management system RGCMS is a set of open source building management system. RGCMS1.06 version of the existence of arbitrary file read, write vulnerability, attackers can use this vulnerability to obtain control of the web server...

Exploit for Use After Free in Microsoft

CVE-2019-0708 CVE-2019-0708 using Metasploit-Framework...

Backdoor Found in Utility for Linux, Unix Servers

In an unnerving twist, when a critical zero-day vulnerability was reported in a Unix administration tool, called Webmin, it was revealed the flaw was no accident. According to researchers, the vulnerability was a secret backdoor planted in the popular utility nearly a year before its discovery. T...

PHPCMS suffers from a file upload vulnerability (CNVD-2019-30562)

PHPCMS is a web content management system based on PHP and Mysql architecture. A file upload vulnerability exists in PHPCMS, which can be exploited by attackers to gain control of a web server...

CVE-2019-14771

Backdrop CMS 1.12.x before 1.12.8 and 1.13.x before 1.13.3 allows the upload of entire-site configuration archives through the user interface or command line. It does not sufficiently check uploaded archives for invalid data, potentially allowing non-configuration scripts to be uploaded to the...

libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server...

libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read

An out of bounds read flaw was discovered in libssh2 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a denial of service or read data in the client memory...

libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server...

File Upload Vulnerability in YznCMS

YznCMS aka Otaku CMS is a CMS content management system based on the latest TP5.1 framework. A file upload vulnerability exists in YznCMS, which can be exploited by attackers to gain control of the web server...

CVE-2019-2740

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: XML. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2019-2856

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Application Container - JavaEE. Supported versions that are affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle...

CVE-2019-2800

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successf...

CVE-2019-2784

CVE-2019-2784 affects Oracle MySQL Server (Server: DML) with vulnerable versions 8.0.16 and earlier. The issue enables a high-privileged attacker, over network via multiple protocols, to cause a hang or crash (complete DOS) of MySQL Server. Remediation in linked advisories shows a fix as upgrade ...

CVE-2019-2747

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: GIS. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...