Automox Alive Automox Agent Access Control Error Vulnerability

Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. An Access Control Error vulnerability exists in versions prior to Automox Agent 31 that stems from the use of inadequately protected S3 bucket endpoints to store sensitive files, which can be...

D-Link DIR-655 has a weak password vulnerability

The D-Link DIR-655 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR-655 suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33388)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...

Unauthorized Access Vulnerability in HP Web Web Management System

Hewlett-Packard Trading Shanghai Co., Ltd. was registered on February 8, 1999 in the Market Supervision Administration of the Free Trade Zone. Legal representative Chuang Cheng-Sung Chuang Cheng-Sung, the company's business scope includes computer equipment, printing equipment, imaging equipment,...

Weak Password Vulnerability in TP-LINK TD-8816

hereinafter referred to as "TP-LINK" is a leading global supplier of network communication equipment. A weak password vulnerability exists in the TP-LINK TD-8816. An attacker could exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in Youdot CMS System (CNVD-2021-32482)

Founded in 2012, Changsha Youdot Software Technology Co., Ltd. provides small and medium-sized enterprises SMEs with integrated solutions for website construction, new retail smart stores, micro-sites, micro-malls, live selling, and multi-end mini-programs. A SQL injection vulnerability exists in...

Unauthorized Access Vulnerability in eYou Email System

eYou email system is a powerful email system software with independent intellectual property rights, developed by EYou. An unauthorized access vulnerability exists in the eYou email system, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in ABBYY FineReader PDF 15 for Windows (CNVD-2021-32806)

ABBYY is a leading provider of document conversion, data capture and language software. ABBYY's key areas of research and development include document recognition technology and applied linguistics. ABBYY FineReader PDF 15 for Windows contains a denial of service vulnerability that can be exploit...

Denial of Service Vulnerability in NR286 Router of Shenzhen Leike Industry Co.

Founded in 2000, Shenzhen Leike Industrial Co., Ltd. is one of the leading manufacturers with core technology of intelligent routing and managed switches in China. A denial of service vulnerability exists in the NR286 router of Shenzhen Leike Industry Co. Ltd, which can be exploited by attackers ...

CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)

Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting XSS Date: 2021/03/19 Exploit Author: bt0 Vendor Homepage: http://www.cmsmadesimple.org/ Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip Version: 2.2.15 CVE: CVE-2021-28935...

Weak Password Vulnerability in ZXHN E5500 of ZTE CORPORATION

ZXHN E5500 is a router from ZTE Corporation. A weak password vulnerability exists in the ZXHN E5500 of ZTE Corporation, which can be exploited by an attacker to obtain sensitive information...

4 Ways Cyberattackers Hunt for Security Bugs

Blue teamers are in constant battle against hackers — faceless adversaries whose persistence can seem unending. But these actors have processes just like corporate operations, even if theirs are bootlegged. Attackers seek the path of least resistance: Gain access with as little effort as possible...

Command Execution Vulnerability in Integrated Security System of Hangzhou Hikvision Digital Technology Co.

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A command execution vulnerability exists in the integrated security system of Hangzhou Hikvision Digital Technology Co. An attacker can exploit the vulnerability to gain server privileges...

Oracle MySQL Server Input Validation Error Vulnerability (CNVD-2021-30877)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in the Server: DML component of Oracle MySQL Server 8.0.23 and earlier. An attacker could exploit this vulnerability to affect availability...

Autodesk FBX Review Null Pointer Dereference Vulnerability

Autodesk FBX Review is a lightweight standalone tool for viewing 3D assets and animations. A null pointer dereference vulnerability exists in Autodesk FBX Review version 1.4.1.0. An attacker can exploit this vulnerability by tricking a user into opening a malicious FBX file, causing the applicati...

Logic Flaw Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co.

Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is a logic flaw...

Denial of Service Vulnerability in Fast Cat App

Fast Cat App is a short video app. A denial of service vulnerability exists in Fast Cat APP. An attacker can exploit the vulnerability to cause the program to crash...

HPE Superdome Flex server Denial of Service Vulnerability

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise hpe. A denial of service vulnerability exists in versions prior to HPE Superdome Flex server 3.30.142, which can be exploited by an attacker to cause connections to the BMC web interface to hang...

Unauthorized Access Vulnerability in Panasonic-SF335 Camera

Matsushita Electric China Co., Ltd. is an electronics manufacturer that engages in business activities such as the production and sale of various electrical products. An unauthorized access vulnerability exists in the Panasonic-SF335 camera. An attacker can exploit the vulnerability to obtain...

SAP NetWeaver Application Server for Java Information Disclosure Vulnerability

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP NetWeaver Application Server for Java versions 7.30, 7.31,...