250 matches found
SQL injection vulnerability in the si***.php page of the website building system of Shanghai Shilian Network Technology Development Co.
Shanghai Shilian Network Technology Development Co., Ltd. is a small and medium-sized enterprises to provide website construction services as the core, and supporting the provision of related enterprise information technology application services of professional network service providers. Shangha...
CVE-2020-10668
The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in /home.jsp. The vulnerable parameter is openSI. NOTE: this is fixed in the latest version...
File upload vulnerability in XYHCMS backend si***.php file
XYHCMS Xingyunhai CMS is a completely open source CMS content management system. XYHCMS background si.php file file upload vulnerability. Attackers can use the vulnerability to upload webshell, get server privileges...
si-master.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1090673 Security Researcher Broly157 Helped patch 1687 vulnerabilities Received 7 Coordinated Disclosure badges Received 16 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting si-master.com website and...
CVE-2015-5466
Silicon Integrated Systems XGI WindowsXP Display Manager aka XGI VGA Driver Manager and VGA Display Manager 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call...
Command execution vulnerability in the PHPMyWind si***_sa***.php file
PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A command execution vulnerability exists in the PHPMyWind sisa.php file. An attacker can exploit the vulnerability to execute commands and gain server privileges...
Inim Electronics Smartliving SmartLAN 6.x - Hard-coded Credentials Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Inim Electronics Smartliving SmartLAN 6.x - Hard-coded Credentials Exploit Author: LiquidWorm Product web page: https://www.inim.biz Link:...
Inim Electronics Smartliving SmartLAN 6.x - Remote Command Execution Exploit
Exploit for hardware platform in category web applications Exploit Title: Inim Electronics Smartliving SmartLAN 6.x - Remote Command Execution Author: LiquidWorm Product web page: https://www.inim.biz Link:...
Inim Electronics Smartliving SmartLAN 6.x - Remote Command Execution
Inim Electronics Smartliving SmartLAN 6.x - Remote Command Execution Exploit Title: Inim Electronics Smartliving SmartLAN 6.x - Remote Command Execution Author: LiquidWorm Date: 2019-12-09 Product web page: https://www.inim.biz Link:...
Denial of Service Vulnerability in H3C S5120V2-SI Series Switches
H3C S5120V2-SI switch is a Layer 2 Gigabit Ethernet switch independently developed by Xinhua San Technologies Co., Ltd hereinafter referred to as H3C, which is a second-generation intelligent managed switch designed for network environments requiring high performance, high port density, and easy...
File Inclusion Vulnerability in Blue Route Blog System si***_mo***.php Page
Blue Route Blog System is built with PHP+MySQL. Blue Route blog system simo.php page there is a file inclusion vulnerability, an attacker can use the vulnerability to include any file on the server...
cashback.si.bosch-home.com Improper Access Control vulnerability
Open Bug Bounty ID: OBB-1007501 Security Researcher geeknik Helped patch 8938 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cashback.si.bosch-home.com...
SQL Injection Vulnerability in E-House cms Si*** Page
E-House cms is a real estate website building system. A SQL injection vulnerability exists in the E-House cms Si page, which can be exploited by attackers to obtain sensitive information...
Softing uaGate SI Default Privileges Vulnerability
Softing uaGate SI is a compact industrial gateway product from Softing Germany. A security vulnerability exists in Softing uaGate SI version 1.60.01. The vulnerability can be exploited by an attacker to modify or add executable files in the system default path...
Softing uaGate SI Elevation of Privilege Vulnerability
Softing uaGate SI is a compact industrial gateway product from Softing Germany. An elevation of privilege vulnerability exists in the maintenance script in Softing uaGate SI version 1.60.01, which can be exploited by an attacker to write to a file with superuser privileges...
Softing uaGate SI, uaGate MB and uaGate 840D Command Injection Vulnerabilities
Softing uaGate SI and others are products of Softing Germany.Softing uaGate SI is a compact industrial gateway.Softing uaGate 840D is an IoT gateway.Softing uaGate MB is a gateway for Modbus TCP controllers. A command injection vulnerability exists in the CGI scripts in the Softing uaGate SI,...
CVE-2019-11527
An issue was discovered in Softing uaGate SI 1.60.01. A CGI script is vulnerable to command injection with a maliciously crafted url parameter...
CVE-2019-11528
An issue was discovered in Softing uaGate SI 1.60.01. A system default path for executables is user writable...
