1704 matches found
EPrints Command Injection Vulnerability
EPrints is a free open source software package for building open access repositories compliant with the OAI-PMH protocol. EPrints 3.4.2 suffers from a command injection vulnerability. A remote attacker can exploit this vulnerability by entering specially crafted data into cgi/cal?year= URI to...
Memory Corruption Vulnerability in Nitro Pro (CNVD-2021-21846)
Nitro pro is a PDF production and management software. A memory corruption vulnerability exists in Nitro Pro. An attacker could exploit this vulnerability to cause the program to crash...
Synetics i-doit cross-site scripting vulnerability (CNVD-2021-39651)
Synetics i-doit is a set of open source configuration management database CMDB software from Synetics Germany. The software includes features such as IT infrastructure management, network document management, IP address management and IT asset management. A cross-site scripting vulnerability exis...
Microsoft .NET Core Remote Code Execution Vulnerability (CNVD-2021-14788)
Microsoft.NET Core provides a fast, modular platform for creating server applications that run on Windows, Linux and macOS. A remote code execution vulnerability exists in Microsoft .NET Core. An attacker could exploit the vulnerability to execute code on the target server...
SIYUCMS suffers from an arbitrary file download vulnerability
SIYUCMS is a content management system based on ThinkPHP + AdminLTE. SIYUCMS suffers from an arbitrary file download vulnerability. An attacker can exploit this vulnerability to download arbitrary files on the server...
Exploit for Use After Free in Apache Http_Server
CVE-2019-0211 介绍 CVE-2019-0211 软件架构 软件架构说明 安装教程 1. xxxx 2. xxxx 3. xxxx 使用说明 1. xxxx 2. xxxx 3. xxxx 参与贡献 1. Fork 本仓库 2. 新建 Featxxx 分支 3. 提交代码 4. 新建 Pull Request 特技 1. 使用 Readme\XXX.md 来支持不同的语言，例如 Readme\en.md, Readme\zh.md 2. Gitee 官方博客 blog.gitee.com 3. 你可以 https://gitee.com/explore 这个地址来了解 Git...
TP-Link Archer C5v Information Disclosure Vulnerability
The TP-Link Archer C5v is an AC1200 wireless dual-band Gigabit VoIP router. An information disclosure vulnerability exists in TP-Link Archer C5v 1.7181221. A remote attacker can exploit this vulnerability by sending a USERCFG0,0,0,0,0,0,0,00,0,0,0,00,0 request to the /cgi?1&5 URI to retrieve...
RACOM M!DGE Cross-Site Scripting Vulnerability
The RACOM M!DGE is a cellular router designed for SCADA and telemetry mission-critical applications and is ideally suited for many different wireless applications. A cross-site scripting vulnerability exists in the RACOM M!DGE firmware version 4.4.40.105. An attacker can exploit this vulnerabilit...
Advantech WebAccess/SCADA Local Elevation of Privilege Vulnerability (CNVD-2021-11305)
Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...
Adobe Magento Insecure Direct Object Reference Vulnerability
Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...
Denial of Service Vulnerability in IG902H Edge Computing Gateway of Beijing Yinghantong Network Technology Co.
Beijing Yinghantong Network Technology Co., Ltd. is an Internet of Things IoT technology company, providing safe and reliable industrial routers, industrial switches, industrial IoT gateways, industrial wireless communication modules, and other products and IoT solutions and so on. A...
IBM API Connect Input Validation Error Vulnerability (CNVD-2021-09491)
IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from IBM USA. The product supports creating, running, managing, and securing APIs, microservices, and more. An input validation error vulnerability exists in IBM API Connect, which can be exploited by an...
Google Android Denial of Service Vulnerability (CNVD-2021-19752)
Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. A denial of service vulnerability exists in the Framework component of Google Android 10 and 11. An attacker can exploit this vulnerability to cause a denial of...
xiycms backend has arbitrary file read vulnerability
xiycms is an open source and free enterprise content management system. xiycms backend has an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read the database configuration file...
Hangzhou Zhicong Network Technology Co., Ltd's Rice Cake Mom APP Has Denial of Service Vulnerability
Rice Cake Mom APP is a professional mother and baby service application. Hangzhou Zhicong Network Technology Co., Ltd. rice cake mom APP has a denial of service vulnerability, attackers can send malformed packets to exploit the vulnerability to cause the APP stop running...
Exploit for CVE-2020-23160
Pyrescom-Termod-PoC This is the Proof-of-concept exploit code...
Oracle Scripting Information Disclosure Vulnerability
Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. Scripting is one of the script management console...
Denial of Service Vulnerability in ZXHN F460 at ZTE CORPORATION
ZXHN F460 is ZTE's EPON mode optical cat. A denial of service vulnerability exists in the ZXHN F460 of ZTE Corporation, which can be exploited by attackers to cause a denial of service attack...