Information Disclosure Vulnerability in FineSoft Pharmaceutical Management Software

Hangzhou Meisoft Information Technology Co., Ltd. was founded on August 25, 2011, the scope of business includes services: technical development of computer software and hardware, technical services; wholesale, retail: computer software, hardware. An information disclosure vulnerability exists in...

CVE-2020-29607

creationtimestamp| type| source ---|---|--- 2020-12-16 18:41:39+00:00| seen| https://t.me/cibsecurity/20923 2021-05-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49909 2021-05-26 12:17:00+00:00| seen| https://t.me/pwnwikizhchannel/510 2021-06-18 20:00:35+00:00|...

Apache NuttX TCP Stack Out-of-Bounds Write Vulnerability

Apache NuttX is a real-time embedded operating system from the Apache Software Foundation.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream-based transport layer communication protocol defined by IETF RFC 793. TCP Transmission Control Protocol is a...

Unauthorized Access Vulnerability in Server Room Bodyguard Hardware Devices of Guangzhou Yidianbangke Intelligent Network Technology Co.

Guangzhou Yidianbangke Intelligent Network Technology Co. The company's business scope includes: charging pile facility installation and management; electronic equipment recycling technology consulting services; battery sales; software development; research and development of network technology,...

cPanel Authentication Bypass Vulnerability (CNVD-2021-28342)

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in versions of cPanel prior to 90.0.17. An attacker can exploit this vulnerability to bypass authentication...

Modern Honey Network (MHN) Denial of Service Vulnerability

Modern Honey Network MHN is a central server for honeypot management and data collection. Modern Honey Network MHN A denial of service vulnerability exists in getflagiplocaldb in server/mhn/ui/utils.py on 2020-11-23 and earlier versions, which can be exploited by an attacker to cause a denial of...

Improper access control

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

Unspecified Vulnerability in BASETech GE-131 BT-1837836

The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. The BASETech GE-131 BT-1837836 suffers from a device ID predictability vulnerability. An attacker can exploit this vulnerability to connect to the device...

Arbitrary File Download Vulnerability in Dieppe SSL VPN Service

Ltd. is an information security industry manufacturer integrating R&D, production and sales. An arbitrary file download vulnerability exists in DIPPER SSL VPN Service. An attacker can exploit the vulnerability to view or download arbitrary sensitive files...

Red Hat CloudForms Security Vulnerability

Red Hat CloudForms is a hybrid infrastructure management platform from Red Hat, Inc. The platform provides users with deployment, management, and other capabilities across virtual machines, clouds, containers, and physical infrastructure. Cloudforms has a security vulnerability that can be...

FreeBSD : raptor2 -- buffer overflow (07c7ae7a-224b-11eb-aa6e-e0d55e2a8bf9)

CVE MITRE reports : raptorxmlwriterstartelementcommon in raptorxmlwriter.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace declarations for the XML writer, leading to heap-based buffer overflows sometimes seen in raptorqnameformatasxml. C Tenable Network Security, Inc. The...

Foxit Reader 9.7.1 - Remote Command Execution (Javascript API) Exploit

Exploit Title: Foxit Reader 9.7.1 - Remote Command Execution Javascript API Exploit Author: Nassim Asrir Vendor Homepage: https://www.foxitsoftware.com/ Description: Foxit Reader before 10.0 allows Remote Command Execution via the unsafe app.opencPDFWebPage JavaScript API which allows an attacker...

The vulnerability of the aboutBlankURL() function in the WebKit component of the Apple Safari browser allows a hacker to execute arbitrary code.

The vulnerability of the aboutBlankURL function in the WebKit component of the Apple Safari browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Unspecified Vulnerability in Trend Micro Antivirus for Mac (NVD-C-2020-233707)

Trend Micro Antivirus for Mac is a set of antivirus software based on Mac platform from Trend Micro. A security vulnerability exists in Trend Micro Antivirus for Mac 2020 Consumer that originates from the software's susceptibility to a specific kernel extension request attack, which can be...

RHEL 7 : kernel-rt (RHSA-2020:4280)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4280 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2021-08835)

Microsoft Windows Hyper-V is a tool from Microsoft USA that provides hardware virtualization. The software allows the creation of virtual hard drives, virtual switches, and many other virtual devices. A denial of service vulnerability exists in Microsoft Windows Hyper-V. The vulnerability stems...

Arbitrary Directory Deletion Vulnerability in Mile High PHP Open Source Blog System (CNVD-2020-59461)

MileageMi is a ThinkPHP open source blogging system. MileageMi PHP open source blog system has an arbitrary directory deletion vulnerability that can be exploited by attackers to delete directory files...

Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager

pocsuite-z Legal Disclaimer Usage of pocsuite for attacking targets without prior mutual consent is illegal. pocsuite is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite-z 攻击目标是非法的。 pocsuite-z 仅用于安全测试目的 Overview pocsuite-z is an open-sourced remote vulnerability testing and...

SIMATIC S7-300 has a Denial of Service Vulnerability

The S7-300 is a modular compact PLC system. A denial of service vulnerability exists in SIMATIC S7-300, which can be exploited by an attacker to cause a denial of service to the server...

Cisco IOS XE Denial of Service Vulnerability (CNVD-2021-43454)

Cisco IOS XE is a set of modular operating system based on Linux kernel developed by Cisco for its network equipment. A denial-of-service vulnerability exists in Cisco IOS XE's Control and Configuration of Access Points over Wireless CAPWAP protocol processing used by Cisco Catalyst 9800 series...