CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

Design/Logic Flaw

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

CVE-2021-43117

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

FastAdmin code-related vulnerabilities

fastadmin is a set of ThinkPHP and Bootstrap-based web backend development framework. fastadmin has a security vulnerability that stems from the fact that Fastadmin v1.2.1 is affected by a file upload vulnerability that allows execution of arbitrary code via shell access. No details of the...

PT-2021-23747

Name of the Vulnerable Software and Affected Versions fastadmin version 1.2.1 Description The issue allows for arbitrary code execution through shell access due to a file upload vulnerability. Recommendations For fastadmin version 1.2.1, update to a version that fixes the file upload vulnerabilit...

CVE-2021-43117: Unrestricted Upload of File with Dangerous Type

fastadmin v1.2.1 is affected by a file upload vulnerability which allows arbitrary code execution through shell access...

Victure WR1200 Trust Management Vulnerability

Victure WR1200 is a router. Victure WR1200 1.0.3 and prior versions are vulnerable to trust management issues, which can be exploited by attackers to gain control of the device via SSH...

CVE-2021-40520

Airangel HSMX Gateway devices through 5.2.04 have Weak SSH Credentials...

CVE-2021-37471

Cradlepoint IBR900-600 devices running versions 7.21.10 are vulnerable to a restricted shell escape sequence that provides an attacker the capability to simultaneously deny availability to the device's NetCloud Manager console, local console and SSH command-line...

phpok Arbitrary File Write Vulnerability

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. An arbitrary file write vulnerability exists in the editsavef function in framework/admin/tplcontrol.php in phpok version 5.1. An attacker can exploit this vulnerability to wri...

CVE-2020-18439

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

Design/Logic Flaw

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

CVE-2020-18439

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

CVE-2020-18439

CVE-2020-18439 affects the PHP-based system phpok (version 5.1). The vulnerability is in the function edit_save_f within framework/admin/tpl_control.php , described across multiple sources as allowing an attacker to write arbitrary files or obtain a shell on the host. Several connected records (e...

CVE-2020-18439: Undefined Security Weakness

An issue was discoverered in in function editsavef in framework/admin/tplcontrol.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell...

PT-2021-10170

Name of the Vulnerable Software and Affected Versions: qinggan phpok version 5.1 Description: An issue was discovered in the edit save f function in framework/admin/tpl control.php, allowing attackers to write arbitrary files or get a shell. Recommendations: For qinggan phpok version 5.1, conside...

Qinggan PHP code issues and vulnerabilities

phpok is a set of enterprise website system developed by Shenzhen锟絪 technology limited company using PHP+MYSQL language. An arbitrary file write vulnerability exists in the editsavef function in framework/admin/tplcontrol.php in phpok version 5.1. An attacker can exploit this vulnerability to wri...

YouTube Video Grabber 1.9.9.1 Buffer Overflow

Exploit Title: YouTube Video Grabber 1.9.9.1 - Buffer Overflow SEH Date: 01.11.2021 Software Link: https://www.litexmedia.com/ytgrabber.exe Exploit Author: Achilles Tested Version: 1.9.9.1 Tested on: Windows 7 64bit 1.- Run python code : YouTube.py 2.- Open EVIL.txt and copy All content to...