Arbitrary File Deletion Vulnerability in ECShop v4.1.2

ECShop is a B2C independent online store system, suitable for businesses and individuals to quickly build a personalized online store. ECShop v4.1.2 has an arbitrary file deletion vulnerability that can be exploited by attackers to delete arbitrary folders...

Kubernetes SIGs Secrets-store-csi-driver path traversal vulnerability

Kubernetes SIGs Secrets-store-csi-driver is a K8s component for storing confidential files based on CSI volumes from the Kubernetes SIGs organization. A security vulnerability exists in Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16, which can be exploited by an attacker to modi...

Kubernetes SIGs Secrets-store-csi-driver path traversal vulnerability

Kubernetes SIGs Secrets-store-csi-driver is a K8s component for storing confidential files based on CSI volumes from the Kubernetes SIGs organization. A security vulnerability in the Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6 can be exploited by an attacker to create special...

HosTaGe - Low Interaction Mobile Honeypot

HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most malware propagate over the network via specific protocols, a low-interaction honeypot located at a mobile device can check...

Oracle E-Business Suite 授权问题漏洞

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in the Oracle iStore...

SQL Injection Vulnerability in ECShop Interface

ECShop is a B2C independent online store system, suitable for businesses and individuals to quickly build a personalized online store. ECShop interface is vulnerable to SQL injection. An attacker can exploit this vulnerability to obtain sensitive database information...

CVE-2021-3139

A flaw was found in the Linux kernel’s implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to overwrite data on t...

Microsoft Windows InstallService Directory Junction Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

Projectworlds Online Book Store Project In Php SQL Injection Vulnerability

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. Projectworlds Online Book Store Project In Php 1.0 is vulnerable to SQL injection. An attacker could exploit this vulnerability to dump the entire database on which the w...

[SECURITY] Fedora 32 Update: etcd-3.4.13-1.fc32

Distributed reliable key-value store for the most critical data of a distri buted system...

SQL Injection Vulnerability in Tengzhi Yunmao Store Management System

Tengzhi cloud trade through the store management system for fasteners, electromechanical tools, hardware industry store purchasing, warehousing, processing, sales, finance, statistics for the core business management module, to achieve comprehensive control of the store. Tengzhi cloud trade store...

OIC Exponent CMS 输入验证错误漏洞

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from OIC, USA. The system supports direct editing in the page and provides user management, site configuration, content editing and other functions. An input validation error vulnerability exists in Exponen...

nopCommerce Cross-Site Scripting Vulnerability (CNVD-2021-01555)

nopCommerce is a set of open source general e-commerce platform. A cross-site scripting vulnerability exists in nopCommerce Store version 4.30, which stems from the Schedule tasks name field not being effectively filtered for XSS statements. This vulnerability allows an attacker to inject an XSS...

CVE-2020-29475

nopCommerce Store 4.30 is affected by cross-site scripting XSS in the Schedule tasks name field. This vulnerability can allow an attacker to inject the XSS payload in Schedule tasks and each time any user will go to that page of the website, the XSS triggers and attacker can able to steal the...

CVE-2020-29475

nopCommerce Store 4.30 is affected by cross-site scripting XSS in the Schedule tasks name field. This vulnerability can allow an attacker to inject the XSS payload in Schedule tasks and each time any user will go to that page of the website, the XSS triggers and attacker can able to steal the...

CVE-2020-29475

nopCommerce Store 4.30 is affected by cross-site scripting XSS in the Schedule tasks name field. This vulnerability can allow an attacker to inject the XSS payload in Schedule tasks and each time any user will go to that page of the website, the XSS triggers and attacker can able to steal the...

Weak password vulnerability in China Telecom's Skywatch Store Camera

Skywing Watch Shop is a security business integrating camera, video recording, real-time monitoring, PTZ control, alarm and storage launched by CLP Hongxin Information Technology Co., Ltd. for companies, stores and other places that need to carry out visualization management, and through the clie...

h1-ctf: Hacky Holidays CTF Writeup

Intro: 12 days of challenges - some more challenging than others! This holiday CTF had all 12 challenges hosted on the website https://hackyholidays.h1ctf.com/ F1129112 Challenge 1: I started by significantly overthinking all of the early challenges in this competition. When this CTF started the...

Vulnerability fixed in Zimbra

Synacor has fixed a vulnerability in Zimbra in the way in which XML entities are processed in zm-saml-consumer-store. This vulnerability makes it possible for a malicious person to perform a Denial-of-Service attack. Attacks carried out via this vulnerability are also known as "billion laughs"...

Command Execution Vulnerability in Smart Store System

Smart Store System is a store management system tailor-made for retail stores by Kingdee Software. There is no need to buy a new machine, and the original cash register equipment can be adapted to the system, which can be used by multiple cash registers, cell phones and computers together to...