Denial of Service Vulnerability in LoveFast Router

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Denial of Service Vulnerability in LoveFast Router (CNVD-2021-03424)

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technical service, technical consultation, technology transfer, etc.. There is a denial-of-service...

Unauthorized Access Vulnerability in iOffice 10 Hospital Edition

Redfan Technology is mainly committed to government, enterprises, ships, medical and other industry informationization services and so on. Unauthorized access vulnerability exists in iOffice10 Hospital Edition, which can be exploited by attackers to obtain sensitive information...

Zoho ManageEngine Desktop Central HTML Injection Vulnerability

Zoho ManageEngine Desktop Central is integrated desktop and mobile device management software that helps manage servers, laptops, desktops, smartphones and tablets from a central location. An HTML injection vulnerability exists in Zoho ManageEngine Desktop Central 10.0.430. The vulnerability can ...

Logic Flaw Vulnerability in ZZCMS2020

ZZCMS is a content management system. A logic flaw vulnerability exists in ZZCMS2020, which can be exploited by attackers to gain server privileges...

IBM Sterling B2B Integrator Elevation of Privilege Vulnerability

IBM Sterling B2B Integrator is a transaction engine, a set of components that run the processes you define and manage based on your business needs. An elevation of privilege vulnerability exists in IBM Sterling B2B Integrator 5.2.0.0 - 5.2.6.52, 6.0.0.0 - 6.0.3.2, 6.1.0.0. The vulnerability stems...

Tencent Conference for Windows suffers from dll hijacking vulnerability

Tencent Meeting is an online video cloud meeting software from Tencent. Tencent Conference for Windows suffers from a dll hijacking vulnerability that can be exploited by attackers to gain control of the server...

Mozilla Rust traitobject crate buffer overflow vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer overflow vulnerability exists in traitobject crate in versions of Mozilla Rust prior to 2020-06-01, which stems from the fact that it incorrectly expects a fat pointer, and can be exploited by an attack...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03438)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03419)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Extreme Office has an array out-of-bounds read vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. An array out-of-bounds read vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Curtain (Windows client) has a dll hijacking vulnerability

Curtain is a mind mapping software for computers. A dll hijacking vulnerability exists in Curtain Windows client. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Overstepping Vulnerability in Tianyi Broadband Government and Enterprise Gateway A8-C

Tianyi Broadband Government & Enterprise Gateway A8-C is a fiber optic cat from China Telecom. An override vulnerability exists in Tianyi Broadband Government and Enterprise Gateway A8-C. An attacker can exploit the vulnerability to cause a reset override...

HGiga MailSherlock Command Injection Vulnerability

HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A command injection vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock failing to properly validate specific parameters. An attacker can exploit this...

Denial of Service Vulnerability in the Car Book App

The Car Book app is an automotive information app. Automobile Daquan app has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in Kingsoft Terminal Security System V9.0

Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical care and grouped enterprises. Kingsoft Terminal Security System V9.0 suffers from SQL injection vulnerability, which can be exploited by...

Memory Corruption Vulnerability in WPS Office Professional (CNVD-2021-01304)

Kingsoft WPS is an office software produced by Kingsoft Office Software, which can realize a variety of functions commonly used in office software, such as text, forms, presentations and so on. WPS Office Professional Edition has a memory corruption vulnerability that can be exploited by attacker...

Local Elevation of Privilege Vulnerability in System Explorer v7.0.0

System Explorer is a free system resource management tool. A local elevation of privilege vulnerability exists in System Explorer v7.0.0, which can be exploited by an attacker to gain control of a server...

Ship 100 online education system has an arbitrary file download vulnerability

Shipping 100 is a virtual goods automatic shipping system / article pay to read system, without human guards, customers can buy online to automatically complete the transaction. There is an arbitrary file download vulnerability in the Shipment 100 online education system. An attacker can exploit...

Vulmap - Web Vulnerability Scanning And Verification Tools

Vulmap is a vulnerability scanning tool that can scan for vulnerabilities in Web containers, Web servers, Web middleware, and CMS and other Web programs, and has vulnerability exploitation functions. Relevant testers can use vulmap to detect whether the target has a specific vulnerability, and ca...