Cisco Smart Software Manager Satellite SQL Injection Vulnerability

Cisco Smart Software Manager Satellite is a Cisco component for Cisco product license management. A SQL injection vulnerability exists in the Web management interface of Cisco Smart Software Manager Satellite 5.1.0 and earlier versions. The vulnerability stems from the web management interface no...

Cisco SD-WAN vManage Information Disclosure Vulnerability

Cisco SD-WAN Solution is a suite of network extension solutions from Cisco, of which vManage is the console. An information disclosure vulnerability exists in the CLI of Cisco SD-WAN vManage versions prior to 19.2.3, which can be exploited by an attacker to read database files from the underlying...

TP-Link TL-R473GP-AC in Denial of Service Vulnerability (CNVD-2021-08391)

TL-R473GP-AC is TP-LINK's PoE-AC all-in-one VPN router product developed specifically for environments such as small and micro businesses, offices and villas. TP-Link TL-R473GP-AC is vulnerable to a denial of service vulnerability. An attacker can exploit the vulnerability to cause a denial of...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Gitlab

This repository is an offensive tool for a vulnerability hub. It contains various tools and exploits for testing and demonstrating vulnerabilities in different software and systems. The repository includes a range of tools, such as Docker image builders, format checkers, and Markdown linters, as...

Google Android suffers from a denial of service vulnerability (CNVD-2021-10300)

Google Android generally refers to Android. android is a free and open source operating system based on the Linux kernel without GNU components. Google Android has a denial of service vulnerability that can be exploited by an attacker to cause a denial of service...

Extreme Office 2019 suffers from a denial of service vulnerability (CNVD-2021-05116)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a denial of service vulnerability. An attacker can exploit the vulnerability to cause the program to crash...

DLL hijacking vulnerability in Sogou High Speed Browser (CNVD-2021-05822)

Sogou Browser is developed by Sogou and is based on Google chromium kernel. Sogou High Speed Browser suffers from a DLL hijacking vulnerability, which can be exploited by attackers to gain server control privileges...

Cisco Finesse Cross-Site Scripting Vulnerability (CNVD-2021-41165)

Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. A cross-site scripting vulnerability exists in the Web management interface of Cisco Finesse versions prior to 12.0 ES05, 12.5 ES05, which can be exploited by a remote authenticated attacker to execute...

WeChat program has unauthorized access vulnerability

WeChat is a cell phone communication software. An unauthorized access vulnerability exists in the WeChat program, which can be exploited by an attacker to obtain sensitive information...

Command Execution Vulnerability in CMCC R3S-3 of CMCC Internet of Things Ltd (CNVD-2021-05105)

The CMCC R3S-3 is a router. A command execution vulnerability exists in the CMCC R3S-3 of CMCC IoT Ltd. An attacker can exploit the vulnerability to perform remote code execution as root on the device...

Denial of Service Vulnerability in Tenda AC9, AC15 (CNVD-2021-03515)

Founded in 1999, Shenzhen Jixiang Tengda Technology Co., Ltd. is a professional supplier of network communication equipments and solutions, as well as a high-tech enterprise integrating R&D, production, supply, sales and service. A denial of service vulnerability exists in Tenda AC9, AC15, which...

Win911 Enterprise Elevation of Privilege Vulnerability

Win911 Enterprise is a mobile application from Win911 USA that allows information interaction with industrial equipment. An elevation of privilege vulnerability exists in Win-911 Enterprise version V4.20.13, which can be exploited by an attacker to override various executable programs, which coul...

Elevation of Privilege Vulnerability in the Windows Client of Night God Emulator

Night God Emulator is a completely free software. An elevation of privilege vulnerability exists in the Windows client of NightGod Emulator, which can be exploited by an attacker to gain control of the server...

Information Disclosure Vulnerability in FineSoft Pharmaceutical Management Software

Hangzhou Meisoft Information Technology Co., Ltd. was founded on August 25, 2011, the scope of business includes services: technical development of computer software and hardware, technical services; wholesale, retail: computer software, hardware. An information disclosure vulnerability exists in...

CVE-2020-29607

creationtimestamp| type| source ---|---|--- 2020-12-16 18:41:39+00:00| seen| https://t.me/cibsecurity/20923 2021-05-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49909 2021-05-26 12:17:00+00:00| seen| https://t.me/pwnwikizhchannel/510 2021-06-18 20:00:35+00:00|...

Apache NuttX TCP Stack Out-of-Bounds Write Vulnerability

Apache NuttX is a real-time embedded operating system from the Apache Software Foundation.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream-based transport layer communication protocol defined by IETF RFC 793. TCP Transmission Control Protocol is a...

Unauthorized Access Vulnerability in Server Room Bodyguard Hardware Devices of Guangzhou Yidianbangke Intelligent Network Technology Co.

Guangzhou Yidianbangke Intelligent Network Technology Co. The company's business scope includes: charging pile facility installation and management; electronic equipment recycling technology consulting services; battery sales; software development; research and development of network technology,...

cPanel Authentication Bypass Vulnerability (CNVD-2021-28342)

cPanel is a set of Web-based host control management system of the U.S. cPanel. An authentication bypass vulnerability exists in versions of cPanel prior to 90.0.17. An attacker can exploit this vulnerability to bypass authentication...

Modern Honey Network (MHN) Denial of Service Vulnerability

Modern Honey Network MHN is a central server for honeypot management and data collection. Modern Honey Network MHN A denial of service vulnerability exists in getflagiplocaldb in server/mhn/ui/utils.py on 2020-11-23 and earlier versions, which can be exploited by an attacker to cause a denial of...

Improper access control

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...