赞赞网络科技 EyouCms SQL注入漏洞

EyouCms is a free + open source enterprise content management system based on the TP5.0 framework as the core development, focusing on the needs of enterprise building users. A SQL injection vulnerability exists in index.php in EyouCms version 1.4.7. An attacker can exploit this vulnerability by...

MyBB 1.8.25 Remote Command Execution

Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL [email protected] Date: 19.03.2021 Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...

Linux kernel competitive conditions issue vulnerability (CNVD-2021-43551)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel versions prior to 5.5.11 suffer from a contention condition issue vulnerability that stems from an issue found in kmemcacheallocbulk in mm/slub.c. slowpath lacks t...

CVE-2020-29370

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

CVE-2020-29370

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

UBUNTU-CVE-2020-29370

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

CVE-2020-29370

An issue was discovered in kmemcacheallocbulk in mm/slub.c in the Linux kernel before 5.5.11. The slowpath lacks the required TID increment, aka CID-fd4d9c7d0c71...

Linux kernel 竞争条件问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel versions prior to 5.5.11 suffer from a contention condition issue vulnerability that stems from an issue found in kmemcacheallocbulk in mm/slub.c. slowpath lacks t...

CVE-2019-10595

Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

CVE-2019-10595

Possible buffer overwrite in message handler due to lack of validation of tid value calculated from packets received from firmware in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...

WordPress Plugin Google Review Slider 'tid' SQL Injection Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A SQL injection vulnerability exists in the WordPress plugin Google Review Slider 'tid',...

CVE-2018-20476

An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...

CVE-2018-16445

An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...

CVE-2018-16445

An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...

SeaCMS SQL Injection Vulnerability (CNVD-2019-08332)

SeaCMS Ocean CMS is a professional open source free PHP film and television system. 6.61 and earlier versions of SeaCMS SQL injection vulnerability, attackers can through the adm1n/admintopicvod.php request in the tid parameter to take advantage of the vulnerability for SQL injection attacks...

Samba SMB1 Server Use After Free (CVE-2017-14746)

A use after free vulnerability exists in the SMB1 component of Samba. The vulnerability is due to insufficient handling of TIDs in certain circumstances. A remote, authenticated attacker could exploit this vulnerability by sending maliciously crafted commands to the target server...

SQL Injection Vulnerability in Lazy WorkPass OA Web Intelligent Office System

Lazy work pass OA network intelligent office system is suitable for enterprises and institutions of the general network office software, the system uses B / S operation mode, free version for small and medium-sized enterprises. There is a SQL injection vulnerability in the OA Network Intelligent...

SQL injection vulnerability in the tid parameter of Zhejiang SouPai Information Technology PaiSang network station building system

Paixang network station-building system is a station-building system developed by Zhejiang Soupai Information Technology Co. There is a SQL injection vulnerability in the tid parameter of PaiSang website builder system, which is caused by the lack of effective filtering of the tid parameter, and...

SQL Injection Vulnerability in Ocean CMS tid Parameter

Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the admintopicvod.php page of Ocean CMS 6.46 utf-8 official. The lack of filtering of the 'tid' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the database...

Duomi (DuomiCms) movie and TV management system topic and tid parameters exist SQL injection vulnerability

Duomi DuomiCms film and television management system is a set of specialized video on demand system. A SQL injection vulnerability exists in DuomiCms. The lack of filtering of the 'topic' and 'tid' parameters allows an attacker to exploit the vulnerability to obtain sensitive information from the...