EUVD-2018-20371

Malware in sbrugna...

Improper File URI Scheme Validation

changedetection.io is vulnerable to improper file URI scheme validation. The vulnerability is due to a logic flaw in the issafeurl function, which improperly allows the file: scheme and insufficiently restricts access to local file paths when ALLOWFILEURI is set to false or undefined...

Design/Logic Flaw

yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expandmmacparams at /nasm/nasm-pp.c...

Logic Flaw Vulnerability in Hsycms

Hsycms is a rapid site building system developed by TP5.0 framework. Hsycms has a logic flaw vulnerability that can be exploited to obtain sensitive information...

Logic Flaw Vulnerability in Songcms Front-End Login Page

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A logic flaw vulnerability exists in the front-end login page of Songcms. An attacker ca...

Flawed Logic Vulnerability in YunMok Backend

YUNMOK adopts PHP + MYSQL as the programming language, through the module and visualization to achieve a technology-free website management operations, users are free to use, and the module can be freely edited, the template can be switched at will. YunMok backend has a logic flaw vulnerability,...

OKLite suffers from a logic flaw vulnerability (CNVD-2020-71655)

OKLite is a minimalist enterprise website system, the main target group is the display enterprise website users, so that the traditional small business quickly deploy the website. OKLite suffers from a logic flaw vulnerability that can be exploited by attackers to compromise the integrity of the...