Directory traversal

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

CVE-2018-6461

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

CVE-2018-6461

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

CVE-2018-6461

March Hare WINCVS before 2.8.01 build 6610, and CVS Suite before 2009R2 build 6610, contains an Insecure Library Loading vulnerability in the wincvs2.exe or wincvs.exe file, which may allow local users to gain privileges via a Trojan horse Python or TCL DLL file in the current working directory...

File upload vulnerability in the AppUploadController.class.php page in the frontend of ShopsN v2.2.5 official version (CNVD-2018-02969)

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN v2.2.5 official version of the front AppUploadController.class.php page file...

File Upload Vulnerability in N5 Version of Nanjung Exam System

Nanqiong Exam System is a new generation of pure B/S architecture general network examination system designed for enterprises, government organizations and educational units. Nanqiong exam system N5 version in the user to modify the personal data upload personal avatar at the file upload...

Arbitrary File Creation Vulnerability in YidaCMS Web Management System JS1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS website management system JS1.8.0 version exists arbitrary file creation vulnerability, the attacker through the creation of parsable script file, edit and save the Trojan code will be injected into th...

Renaming Vulnerability in YidaCMS Web Management System JS 1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. A renaming vulnerability exists in version JS1.8.0 of the YidaCMS website management system, which allows an attacker to upload an image Trojan using the kingeditor editor employed by the website and rename th...

2017 in Snort Signatures.

This post was written by Martin Lee and Vanja Svajcer. 2017 was an eventful year for cyber security with high profile vulnerabilities that allowed self-replicating worm attacks such as WannaCry and BadRabbit to impact organizations throughout the world. In 2017, Talos researchers discovered many...

NiuShop open source mall system V1.22 file upload vulnerability

NiuShop open source mall system is by Shanxi Niu Cool Information Technology Co., Ltd. completely independent design, research and development of a set of PHP open source e-commerce system . NiuShop open source mall system V1.22 file upload vulnerability , attackers can upload Trojan horse files ...

Arbitrary File Creation Vulnerability in ourphp v1.8.0

Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version of the existence of arbitrary file creation vulnerability, the attacker can be edited through the background of the online template comes with the creation point to create any suffix file and write Trojan...

Code execution vulnerability in CLTPHP version 5.5.2

CLTPHP is a content management system based on ThinkPHP5 development with Layui framework in the backend. A code execution vulnerability exists in CLTPHP version 5.5.2, where an attacker can log in to the frontend and upload a Trojan horse file in the avatar upload area to gain control of the web...

File upload vulnerability in BootCMS manage.php page

BootCMS is an open source content management system that runs under PHP + MySQL and is protected by a GPL license. A file upload vulnerability exists in the BootCMS manage.php page. An attacker can exploit the vulnerability to control server privileges by uploading a script Trojan...

Local File Inclusion Vulnerability in phpyun v4.3.1 Beta

PHP cloud talent system phpyun is an open source talent and enterprise job search recruitment, hiring solutions built using PHP and MySQL database. A local file inclusion vulnerability exists in phpyun v4.3.1 Beta. An attacker can obtain a webshell by including an external php file to execute a...

CVE-2018-0507

Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0507

Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0507

The CVE-2018-0507 entry maps to an untrusted search path vulnerability in the installer components of FLET'S VIRUS CLEAR Easy Setup & Application Tool (ver.11 and earlier) and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool (ver.11 and earlier). The root cause is insecure loading of Dynamic L...

QYKCMS upfile.php page has an arbitrary file upload vulnerability

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS upfile.php page exists arbitrary file upload vulnerability. Allow attackers to exploit the vulnerability by uploading a script Trojan horse, thus controlling the server privileges...

OTCMS PHP_V2.83 code execution vulnerability in sysCheckFile_deal.php file

Nettitanium Article Management System OTCMS is a news/article publishing website using PHP+sqlite/mysql. A code execution vulnerability exists in the OTCMS PHPV2.83 sysCheckFiledeal.php file. An attacker can obtain a webshell by executing sql statements and writing a one-sentence trojan...