Vanno CMS latest version exists to bypass the change of administrative password vulnerability

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. Vanno CMS latest version exists to bypass the change admin password vulnerability. Attackers can use this vulnerability to change cookies to enter the background to change the...

Linux kernel local denial of service vulnerability (CNVD-2017-09899)

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. Linux kernel suffers from a local denial of service vulnerability. A local attacker could exploit this vulnerability to cause a denial of service...

Dahua Digital Video Recorder and IP Camera Configuration File Password Vulnerability

Dahua DH-IPC-HDBW23A0RN-ZS and others are camera products from DaHua China. A profile password vulnerability exists in a variety of DaHua digital video recorders and IP cameras, which can be exploited by an attacker to impersonate a privileged user and gain access to sensitive information...

Samsung SM-G920F SecEmailSync SQL Injection Vulnerability

The Samsung SM-G920F Galaxy S6 is a smartphone from the South Korean company Samsung.SecEmailSync is one of the email synchronization plugins available. An SQL injection vulnerability exists in the SecEmailSync plugin in the Samsung SM-G920F build G920FXXU2COH2 version. A remote attacker can...

Adobe Flash Player Code Execution Vulnerability (CNVD-2017-06319)

Adobe Flash Player is a software developed by Adobe, Inc. and is a widely used, proprietary multimedia program player. A code execution vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to execute arbitrary code to compromise an affected system...

Avast Antivirus Security Bypass Vulnerability

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in Avast Antivirus version 17. The vulnerability can be exploited by an attacker to bypass the Self-Defense feature...

libmad -- multiple vulnerabilities

National Vulnerability Database: CVE-2017-8372: The madlayerIII function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of service assertion failure and application exit via a crafted audio file. CVE-2017-8373: The madlayerIII function ...

GnuTLS has multiple vulnerabilities

GnuTLS is a free secure communications library for implementing the SSL, TLS and DTLS protocols developed by Nikos Mavrogiannopoulos of Belgium and Simon Josefsson of Sweden, software developers. A security vulnerability exists in the 'cdkpktread' function in the opencdk/read-packet.c file in...

Linux kernel crypto/ahash.c denial of service vulnerability

Linux kernel is an open source operating system. Linux kernel has a security vulnerability in the crypto/ahash.c file. An attacker can exploit the vulnerability to submit a special request to crash the system...

Adobe Acrobat and Reader Remote Code Execution Vulnerability (CNVD-2017-04980)

Adobe Acrobat and Reader is the United States Adobe developed a portable document format can be used to publish all the documents of the editing software. A remote code execution vulnerability exists in Adobe Acrobat and Reader. An attacker could use this vulnerability to compromise an affected...

Adobe Photoshop CC Local Privilege Escalation Vulnerability

Adobe Photoshop PS CC is the latest set of image processing and drawing software from the American company Audobee Adobe. A security vulnerability exists in Adobe PS CC. The vulnerability can be exploited by an attacker to gain privileges...

Google Android Qualcomm Audio Driver elevation of privilege vulnerability

Google Android is a mobile operating system based on the Linux open kernel. An elevation of privilege vulnerability exists in Google Android Qualcomm Audio Driver. An attacker can exploit the vulnerability to execute arbitrary code with elevated privileges in the kernel context...

Multiple Huawei Server Design Vulnerabilities

Huawei Tecal RH1288 V2 and others are servers from Huawei, a Chinese company. A security vulnerability exists in several Huawei servers. An attacker can exploit the vulnerability by guessing the session ID used by another user to access the system with a fake identity...

Internet Information Services (IIS) 6.0 Vulnerability

US-CERT is aware of active exploitation of a vulnerability in Windows Server 2003 Operating System Internet Information Services IIS 6.0. Exploitation of this vulnerability may allow a remote attacker to take control of an affected system. On June 15, 2015, Microsoft ended support for Windows...

Huawei Mate 9 Phone Finder bypasses security vulnerability

Huawei Mate9 is a smartphone from Chinese company Huawei huawei.PhoneFinder Phone Finder is one of the security mechanisms which is mainly used to ensure that the phone is not bricked or restored to factory settings after it is lost and stolen. A security bypass vulnerability exists in the Phone...

BlueIris Denial of Service Vulnerability

BlueIris is a video surveillance software. BlueIris suffers from a denial of service vulnerability. It allows attackers to exploit the vulnerability to launch denial of service attacks...

MikroTik RouterOS L2TP Client Man-in-the-Middle Attack Vulnerability

MikroTik RouterOS is a routing operating system developed on the Linux kernel. A security vulnerability in the L2TP Client of MikroTik RouterOS allows remote attackers to exploit the vulnerability to gain unauthorized access to an L2TP server via a man-in-the-middle attack...

Google Android Bluetooth Remote Lift Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA.The Android Bluetooth project aims to provide a simple API to access Android's Bluetooth stack. A remote boost vulnerability exists in Google Android Bluetooth. A remote attacker...

Windows Exploit Suggester

Windows Exploit Suggester This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target. It also notifies the user if there are public exploits and Metasploit modules available for the missing bulletins. Windows...

Nextcloud: WordPress <= 4.6.1 Stored XSS Via Theme File

Hello Team, Description:- Vulnerable code is located at /wp-admin/includes/class-theme-installer-skin.php POC:- https://nextcloud.com/readme.html F151887 FIX:- Upgrade wordpress to latest Refer:- https://wpvulndb.com/vulnerabilities/8718 https://www.mehmetince.net/low-severity-wordpress/ Attack...