Information Leakage Vulnerability in Riptide Networks' MCP Marketing Cloud Platform

Ruijie Networks is a CT infrastructure and industry solutions provider, with the main business of research, development, design and sales of network equipment, network security products and cloud desktop solutions. An information leakage vulnerability exists in Ruijie Network's MCP marketing clou...

Arbitrary File Download Vulnerability in Smart Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. An arbitrary file download vulnerability exists in the Smart Multi-service Security Gateway Intelligent Management Platform o...

Canonical Ubuntu Resource Management Error Vulnerability

Canonical Ubuntu is a GNU/Linux operating system for desktop applications from the British company Canonical. Ubuntu suffers from a resource management error vulnerability that originates from a client-initiated renegotiation denial of service. An attacker could exploit this vulnerability to caus...

Cisco Finesse Open Redirect Vulnerability

Cisco Finesse is a next-generation seat and supervisor desktop designed to provide a collaborative experience for the diverse communities that interact with your customer service organization. An open redirection vulnerability exists in the Web management interface of Cisco Finesse 12.61 and...

Keksec Cybergang Debuts Simps Botnet for Gaming DDoS

A recently developed botnet named “Simps” has emerged from the cyber-underground to carry out distributed denial-of-service DDoS attacks on gaming targets and others, using internet of things IoT nodes. It’s part of the toolset used by the Keksec cybercrime group, researchers said. According to t...

Logic Flaw Vulnerability in CourseSEL

CourseSEL is an online course selection system. A logic flaw vulnerability exists in CourseSEL. An attacker can exploit the vulnerability to log in to an arbitrary account and override the password change...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36643)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability via the read2004sectionappinfo ... /... /src/decode.c:2842 to exploit the vulnerability and cause a heap buffer...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36639)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionclasses ... /... /src/decode.c:2440 to cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36632)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:46 to exploit the vulnerability and cause a heap buffer overflow...

GNU LibreDWG Heap Buffer Overflow Vulnerability (CNVD-2021-36650)

LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10. An attacker can exploit this vulnerability by reading2004sectionhandles ... /... /src/decode.c:2637 to cause a heap buffer overflow...

Google TensorFlow tf.raw_ops.IRFFT Denial of Service Vulnerability (CNVD-2021-37636)

Google TensorFlow is an end-to-end open source machine learning platform. A denial of service vulnerability exists in the implementation of tf.rawops.IRFFT in Google TensorFlow. An attacker can exploit this vulnerability to cause a CHECK-failure denial of service...

Station Master CMS has arbitrary file reading vulnerability

Station Helpers CMS is a CMS open source system dedicated to creating a full-featured ... Station Helpers CMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38029)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38045)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in SEMCMS SCSHOP (CNVD-2021-38040)

SCSHOP is a self-developed open source online store btc system. SEMCMS SCSHOP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Weak password vulnerability in D-Link AC centralized management platform (CNVD-2021-39061)

Founded in 1986, D-Link is a network solutions provider. A weak password vulnerability exists in the D-Link AC centralized management platform, which can be exploited by attackers to obtain sensitive information...

Information Leakage Vulnerability in Tiandiweiye Easy7 Video Surveillance Platform

TIANDY TIANDY is an Internet of Things IoT enterprise with R&D, production and sales of video surveillance products. An information leakage vulnerability exists in TIANDY Easy7 video surveillance platform, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. An arbitrary file read vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to read arbitrary files...

WordPress WPBakery Page Builder Clipboard Plugin Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress WPBakery Page Builder Visual Composer...

Information Disclosure Vulnerability in NETGEAR WPN824

The NETGEAR WPN824 is a wireless broadband router. The NETGEAR WPN824 suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...