6782 matches found
Code Execution Vulnerability in YIXUNCMS v2.0.4.91
YIXUNCMS is a convenient CMS management system developed by Yixun BS Software Studio specializing in website construction for small and medium-sized enterprises. A code execution vulnerability exists in YIXUNCMS v2.0.4.91, which is caused due to the system failing to filter content written to...
CannibalRAT targets Brazil
This post was authored by Warren Mercer and Vitor Ventura Introduction Talos has identified two different versions of a RAT, otherwise known as a remote access trojan, that has been written entirely in Python and is wrapped into a standalone executable. The RAT is impacting users of a Brazilian...
Threat Analysis: ROKRAT Malware
ROKRAT also referred to as DOGcall is a family of malware that has been used by attackers originating from North Korea. The family continues to evolve and adopt techniques from other families also used by the same attack group. The ROKRAT core payload is typically deployed by a loader, which has...
Arbitrary File Editing Vulnerability in BEESCMS Version v4.0
BEESCMS is an enterprise website management system based on PHP+Mysql architecture. BEESCMS v4.0 version of the existence of arbitrary file editing vulnerability, the vulnerability stems from the file path to modify the file and the content of the file to be written into the file are not filtered...
Code Execution Vulnerability in xyhcms v3.5
Xing Yunhai CMS XYHcms is a completely open source CMS content management system. xyhcms v3.5 version of the code execution vulnerabilities , attackers can exploit the vulnerability to insert a sentence Trojan horse to obtain the website webshell...
Code Execution Vulnerability in Ecmos v0.014
Ecmos is a deeply customized system based on ecmall, which is a mall shopping system developed by php+mysql. A code execution vulnerability exists in Ecmos v0.014, when the pendant management for script editing, the system fails to effectively filter the input file content and path parameters. An...
Code Execution Vulnerability in CwCms v1.8
CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. A code execution vulnerability exists in CwCms v1.8, which is due to the system failing to effectively filter input parameters. An attacker can exploit this vulnerability to upload a...
CwCms v1.8 Exists Arbitrary File Write Vulnerability
CwCMS is a customized ASP+Access/MsSql content management system specifically designed for corporate websites. CwCms v1.8 version of the existence of arbitrary file write vulnerability, the vulnerability is due to the system to write the content of the file and file path failed to effectively...
Threat Round Up for Feb 16 - 23
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between February 16 and February 23. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...
Code Execution Vulnerability in SchoolCMS v2.3
SchoolCMS is a school teaching management system based on PHP+MySQL. A code execution vulnerability exists in SchoolCMS v2.3, which is due to the system failing to effectively filter some of the input parameter values. An attacker can exploit this vulnerability to upload a Trojan horse file and...
Code Execution Vulnerability in WANCMS v1.0
WANCMS is a content management system that uses php+mysql program source code. A code execution vulnerability exists in WANCMS v1.0 due to the system failing to effectively filter some input parameter values. An attacker can exploit this vulnerability to upload a Trojan horse file and obtain a...
Code Execution Vulnerability in LvyeCms Version v3.1
LvyeCms 旅烨cms is a php content management system based on ThinkPHP. A code execution vulnerability exists in LvyeCms v3.1, which is caused by the system failing to adequately filter input parameters and values in cached files. An attacker can exploit this vulnerability to upload a Trojan horse fi...
LvyeCms v3.1 has an arbitrary file creation vulnerability
LvyeCms 旅烨cms is a php content management system based on ThinkPHP. LvyeCms v3.1 version exists arbitrary file creation vulnerability, the vulnerability is due to the system fails to fully filter the incoming file content and path parameters. An attacker can use this vulnerability to upload Troja...
LvyeCms v3.1 has an arbitrary file write vulnerability
LvyeCms 旅烨cms is a php content management system based on ThinkPHP. LvyeCms v3.1 version exists arbitrary file write vulnerability, the vulnerability is due to the system fails to fully filter the incoming file content and path parameters. An attacker can use this vulnerability to upload Trojan...
ZhiCms v1.8 Code Execution Vulnerability
ZhiCms is an enterprise building system based on PHP and mysql technology. A code execution vulnerability exists in ZhiCms v1.8, which is due to the system failing to effectively filter input parameters. An attacker can exploit this vulnerability to upload a Trojan script file to obtain a webshel...
File Renaming Vulnerability in CMS Made Simple v2.2.5
CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. A file renaming vulnerability exists in CMS Made Simple v2.2.5 due to the system failing to effectively filter input parameters. An attacker can exploit this vulnerability to...
File Write Vulnerability in Cscms v4.1.8
Cscms is a diversified content management system developed using PHP5+MYSQL as the technical basis. A file write vulnerability exists in Cscms v4.1.8, which is due to the system failing to effectively filter input parameters and file paths. An attacker can use this vulnerability to inject Trojan...
CVE-2018-0516
Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
