Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-40825)

Trend Micro Apex One is an endpoint protection software from Trend Micro. Trend Micro Apex One suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on a system...

WordPress Hide My WP Ghost plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control error...

WordPress WP-PostRatings plugin Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An Access Control Error...

TOTOLINK CP300 Hardcoded Password Vulnerability

TOTOLINK is a mid-to-high-end wireless routing brand in the Asia Pacific region. A hard-coded password vulnerability exists in the TOTOLINK CP300, which can be exploited by an attacker to log in as root...

Ivanti EPM SQL注入漏洞

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. An SQL injection vulnerability exists in Ivanti EPM 2022 SU5 and prior versions, which can be exploited by an attacker to execute arbitrary code...

lunary access control error vulnerability (CNVD-2025-12113)

lunary is a production toolkit for LLM. An access control error vulnerability exists in lunary that stems from the presence of incorrect access control and can be exploited by an attacker to manipulate or access sensitive project data, resulting in data integrity and confidentiality issues...

TOTOLINK CP900L /etc/shadow.sample hardcoded password vulnerability

The TOTOLINK CP900L is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK CP900L suffers from a hard-coded password vulnerability that originates from the inclusion of a hard-coded password in /etc/shadow.sample, which can be exploited by an attacker to log in as root...

SQL Injection Vulnerability in JEPaaS Platform of Beijing Kate Weiye Technology Co.

The JEPaaS platform is a low-code rapid development. Ltd. JEPaaS Platform suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Online Student Enrollment System SQL Injection Vulnerability

Online Student Enrollment System is an online student enrollment system by Lyndon Bermoy, an individual developer. A SQL injection vulnerability exists in Online Student Enrollment System version 1.0, which can be exploited by an attacker to send a specially crafted SQL statement to the...

D-Link D-View Code Execution Vulnerability

D-Link D-View is a Web-based design network device management software from China AUO D-Link. A code execution vulnerability exists in D-Link D-View that stems from the application failing to properly filter special elements that construct code segments. An attacker could exploit the vulnerabilit...

J2EEFAST SysLoginInfoMapper.xml File SQL Injection Vulnerability

J2eeFAST is a Java EE enterprise-class rapid development platform , is committed to building the best small and medium-sized open source free back-end framework platform . J2EEFAST v2.7.0 version of the SQL injection vulnerability , the vulnerability stems from the SysLoginInfoMapper.xml findPage...

Denial of Service Vulnerability in Various Products of Siemens (China) Limited (CNVD-C-2024-309062)

Siemens China Ltd. is a company focused on electrification, automation and digitalization. A denial-of-service vulnerability exists in various Siemens China Ltd. products, which can be exploited by attackers to cause the device to crash due to abnormal processing and a manual restart of the PLC t...

Denial of Service Vulnerability in SIMATIC S7-1500 at Siemens (China) Ltd.

The SIMATIC S7-1500 is a modular control system for a wide range of automation applications within the field of discrete automation. A denial of service vulnerability exists in the SIMATIC S7-1500 from Siemens China Ltd. that can be exploited by attackers to cause a denial of service...

CVE-2024-31844

An issue was discovered in Italtel Embrace 1.6.4. The server does not properly handle application errors. In some cases, this leads to a disclosure of information about the server. An unauthenticated user is able craft specific requests in order to make the application generate an error. Inside a...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002-Reverse-Shell Este script demuestra cómo explot...

SolarWinds Access Rights Manager Trust Management Issue Vulnerability

SolarWinds Access Rights Manager is a lightweight review management system from SolarWinds. A trust management issue vulnerability exists in SolarWinds Access Rights Manager that can be exploited by an attacker to access the RabbitMQ management console...

Adobe Illustrator Resource Management Error Vulnerability (CNVD-2024-24292)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Illustrator versions 28.4 and 27.9.3, which stems from being affected by a reuse-after-release vulnerability. An attacker could...

Arbitrary File Read Vulnerability in LianSoft Secure Data Exchange System of Shenzhen LianSoft Technology Co.

Shenzhen LianSoft Technology Co., Ltd. is a company that focuses on the enterprise-level network security market, and its main business is to provide network security products and services for government and enterprise customers. Shenzhen LianSoft Technology Co., Ltd LianSoft security data exchan...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2024-39674)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

Fortinet FortiOS Denial of Service Vulnerability

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A denial of service vulnerability...