CVE-2024-8165

BeikeShop (Chengdu Everbrite Network Technology) vulnerable up to version 1.5.5 due to a path traversal in the exportZip function of /admin/file_manager/export. The issue arises from manipulation of the path argument, enabling remote exploitation. Public exploit availability is noted; upgrading t...

CVE-2024-8163

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

CVE-2024-8163 Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

CVE-2024-8163 Chengdu Everbrite Network Technology BeikeShop files destroyFiles path traversal

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the function destroyFiles of the file /admin/filemanager/files. The manipulation of the argument files results in path traversal. It is possible to launch the attack remotely. The...

Security Bulletin: Multiple Oracle Outside In Technology vulnerabilities in IBM Engineering Requirements Management DOORS Next

Summary Multiple security vulnerabilities in Oracle Outside In Technology affect IBM Engineering Requirements Management DOORS Next. Vulnerability Details CVEID:CVE-2024-21117 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Core component could...

Security Bulletin: There are multiple vulnerabilities in the IBM SDK, Java Technology Edition that is shipped with TXSeries for Multiplatforms.

Summary There are multiple vulnerabilities in the IBM SDK, Java Technology Edition that is shipped with TXSeries for Multiplatforms CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945, CVE-2023-33850. An update to TXSeries for Multiplatforms has been...

US Microchip Giant Hit by Cyberattack, Disrupting Operations

Microchip Technology hit by cyberattack, disrupting manufacturing operations. A major disruption to semiconductor production has been reported, impacting…...

Command Execution Vulnerability in NBR800G of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-40101)

The NBR800G is an enterprise-class router. A command execution vulnerability exists in the NBR800G of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to gain server privileges...

Remote Command Execution Vulnerability in H2 Component of e-cology Product of Panmicro Networks Technology Co.

e-cology is a new and efficient collaborative office system created by Panavision for medium and large organizations. A remote command execution vulnerability exists in the H2 component of the e-cology product of Panmicro Networks Technology Co. The vulnerability allows obtaining an administrator...

File Upload Vulnerability in MSG5200-2GEC-4E-X4 and MSG2100E-UPON-4V at Risecomm Technology Development Co.

Ltd. is an industry-leading provider of optical networking products and system solutions. A file upload vulnerability exists in the MSG5200-2GEC-4E-X4 and MSG2100E-UPON-4V of Risecomm Technology Development Corporation, which can be exploited by an attacker to gain server privileges...

SQL Injection Vulnerability in Intelligent Water Business Charging System of Xintian Technology Company Limited (CNVD-2024-38707)

Xintian Technology Co., Ltd. is an enterprise mainly engaged in the instrumentation manufacturing industry. A SQL injection vulnerability exists in the Intelligent Water Business Charging System of Xintian Technology Company Limited, which can be exploited by attackers to obtain sensitive...

CVE-2024-7921

A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access...

CVE-2024-7921 Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control

A vulnerability has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /report/ParkOutRecord/GetDataList. The manipulation leads to improper access...

CVE-2024-7919

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

CVE-2024-7920

CVE-2024-7920 affects Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805, with an access-control flaw in the file /Report/ParkCommon/GetParkInThroughDeivces. The issue is exploitable remotely and the exploit has been disclosed publicly. Multiple connected documents conf...

CVE-2024-7920 Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetParkInThroughDeivces access control

A vulnerability, which was classified as problematic, was found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. Affected is an unknown function of the file /Report/ParkCommon/GetParkInThroughDeivces. The manipulation leads to improper access controls. It is...

CVE-2024-7920 Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetParkInThroughDeivces access control

A vulnerability, which was classified as problematic, was found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. Affected is an unknown function of the file /Report/ParkCommon/GetParkInThroughDeivces. The manipulation leads to improper access controls. It is...

CVE-2024-7919 Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control

A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The...

SQL Injection Vulnerability in Intelligent Cloud Gateway Registration Management Platform of Zhejiang Dahua Technology Co.(CNVD-2024-38747)

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the Smart Cloud Gateway registration management platform of Zhejiang Dahua Technology Co. Ltd, which can be exploited...

SUSE CVE-2024-27267

The Object Request Broker ORB in IBM SDK, Java Technology Edition 7.1.0.0 through 7.1.5.18 and 8.0.0.0 through 8.0.8.26 is vulnerable to remote denial of service, caused by a race condition in the management of ORB listener threads...