Aruba Instant Information Disclosure Vulnerability (CNVD-2021-26053)

Aruba Instant is a cloud-hosted controller-less wireless access point. Aruba Instant has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

GravCMS Remote Command Execution

This module exploits arbitrary config write/update vulnerability to achieve remote code execution. Unauthenticated users can execute a terminal command under the context of the web server user. Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25987)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25991)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25994)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25989)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

SolarWinds Orion Platform Reverse Tag Phishing Vulnerability

SolarWinds Orion Platform is a comprehensive bandwidth performance management and fault management application that lets you view real-time statistics about your network directly from your Web browser. A reverse label phishing vulnerability exists in the Customize Menu Item Options page in...

SIYUCMS suffers from an arbitrary file read vulnerability (CNVD-2021-26009)

SIYUCMS is a content management system based on ThinkPHP + AdminLTE. SIYUCMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Netop Vision Pro Misauthorization Vulnerability

Netop Vision Pro is a student monitoring system for teachers to facilitate student learning while using school computers. A security vulnerability exists in Netop Vision Pro. An attacker could exploit the vulnerability to replay network traffic...

Information_Collection_Handbook

The repository is an information collection handbook for penetration testing and source code analysis. It contains a collection of tools and resources for gathering information about a target, including domain name information, application information, and source code analysis. The repository...

Logical flaws exist in the usb server management system of Beijing Shengxun Meiheng Technology Development Co.

Beijing Shengxun Meiheng Technology Development Co., Ltd. is a young technology innovation company. There is a logic flaw vulnerability in the usb server management system of Beijing Shengxun Meiheng Technology Development Co., Ltd, which can be exploited by attackers to bypass login and enter th...

Weak Password Vulnerability in Multiple Network Devices at Atech Technology

Atech is a small and medium-sized network solution provider and service provider in China. A weak password vulnerability exists in a number of Atech's network devices, which can be exploited by attacks to obtain sensitive information...

Information leakage vulnerability in H5S CONSOLE of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co. was founded on 09/25/2018. Legal representative Xue Shuimu, the company's business scope includes: engaged in computer technology, network technology, electromechanical technology, electronic technology, information technology, digital technology, communication...

Denial of Service Vulnerability in ForceControl

ForceControl is a general-purpose man-machine visualization monitoring and configuration software, which is the first automation software product in China with distributed real-time database technology as its core. ForceControl has a denial of service vulnerability that can be exploited by...

Unauthorized Access Vulnerability in e-mobile Mobile System Management Platform

e-mobile is a mobile office product developed by Shanghai Panmicro Networks Technology Co., Ltd. and is specially designed for cell phone, tablet PC and other mobile terminal users to create a mobile office product. An unauthorized access vulnerability exists in the e-mobile mobile system...

ForceControl suffers from a denial of service vulnerability (CNVD-2021-24699)

ForceControl is a general-purpose man-machine visualization monitoring and configuration software, which is the first automation software product in China with distributed real-time database technology as its core. ForceControl has a denial of service vulnerability that can be exploited by...

WebAccess/HMI Designer suffers from a denial of service vulnerability (CNVD-2021-24696)

WebAccess/HMI Designer is an integrated human-machine interface development tool. A denial of service vulnerability exists in WebAccess/HMI Designer, which can be exploited by attackers to cause a denial of service...

Weak password vulnerability in H3C WAC380-30

H3C WAC380-30 is a gateway-type wireless controller independently developed by Xinhua San Technologies Co. The H3C WAC380-30 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

FUDForum cross-site scripting vulnerability (CNVD-2021-22864)

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24454)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...