Backup by Supsystic <= 2.3.9 - Authenticated Arbitrary File Download and Deletion

The plugin does not check for path traversal attacks, allowing administrator to download and delete any file from the web server. Due to the lack of CSRF check on the file deletion, unauthenticated attacker could make a logged in administrator delete files from the web server as well PoC The PoC...

PT-2021-9426 · Svakom · Svakom Siime Eye

Name of the Vulnerable Software and Affected Versions: Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14 Description: An issue was discovered in the Svakom Siime Eye device. By sending a "set params.cgi?telnetd=1&save=1&reboot=1" request to the webserver, it is possible to enable the telnet...

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server allows a attacker to cause a service failure.

The vulnerability of the HTTP/2 web server implementation in Apache HTTP Server is related to inconsistent interpretation of http requests. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Svakom Siime Eye Operating System Command Injection Vulnerability

The Svakom Siime Eye is a smart home device from Svakom, USA. An operating system command injection vulnerability exists in Svakom Siime Eye. The vulnerability stems from a command injection issue in the HOST/IP section of the NFS settings menu of the web server running on the device. Arbitrary...

File Upload Vulnerability in Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Co.

Ticketmaster ERP Management System is a specialized ticket management system for airline ticketing agents. A file upload vulnerability exists in the Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Company Limited, which can be exploited by an attacker to gain contro...

Command Execution Vulnerability in JTopCMS Backend of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS back-end command execution vulnerability, attackers can use the vulnerability to obtain control of the web server...

Command Execution Vulnerability in HulaCWMS

HulaCWMS Hula enterprise website management system is based on ThinkPHP5 framework for the development of enterprise website management system. HulaCWMS suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the web server...

Command Execution Vulnerability in GOCLOUD-ISP1000 and GOCLOUD-ISP2000

Shanghai Guoyun Information Technology Co., Ltd. is a provider of intelligent network products and services. A command execution vulnerability exists in GOCLOUD-ISP1000 and GOCLOUD-ISP2000, which can be exploited by an attacker to gain control of a web server...

Command execution vulnerability in Five Fingers CMS backend (CNVD-2021-16339)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in Five Fingers CMS Backend

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

Command Execution Vulnerability in Five Fingers CMS (CNVD-2021-16342)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

LiteSpeed Web Server Enterprise 5.4.11 Command Injection

Exploit Title: LiteSpeed Web Server Enterprise 5.4.11 - Command Injection Authenticated Date: 05/20/2021 Exploit Author: cmOs - SunCSR Vendor Homepage: https://www.litespeedtech.com/ Software Link: https://www.litespeedtech.com/products Version: 5.4.11 Ubuntu/Kali Linux Step 1: Log in to the...

File Upload Vulnerability in Fast Reach CMS (CNVD-2021-15975)

Fast Row CMS is open source and free PHP enterprise website production, construction, development and optimization of SEO management system. FPS CMS has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File upload vulnerability exists in ShopXO (CNVD-2021-15972)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

LiteSpeed Web Server Enterprise 5.4.11 - Command Injection (Authenticated)

Exploit Title: LiteSpeed Web Server Enterprise 5.4.11 - Command Injection Authenticated Date: 05/20/2021 Exploit Author: cmOs - SunCSR Vendor Homepage: https://www.litespeedtech.com/ Software Link: https://www.litespeedtech.com/products Version: 5.4.11 Ubuntu/Kali Linux Step 1: Log in to the...

Command execution vulnerability in Five Fingers CMS backend (CNVD-2021-16338)

Five Fingers CMS is an open source content management system that supports LNAMP architecture. Five Fingers CMS backend has a command execution vulnerability that can be exploited by attackers to gain control of the web server...

File Upload Vulnerability in ShopXO

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has a file upload vulnerability that can be exploited by an attacker to gain control of the web server...

File Upload Vulnerability in Arcvideo Live at Hangzhou Danghong Technology Co.

Arcvideo Live is an encoding and transcoding system based on real-time streaming media. A file upload vulnerability exists in Arcvideo Live of Hangzhou Danghong Technology Co. Ltd. that can be exploited by an attacker to gain control of a web server...

jetty: buffer not correctly recycled in Gzip Request inflation

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that ...

Security Bulletin: IBM API Connect is impacted by insecure web server configuration (CVE-2020-4825)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2020-4825 DESCRIPTION: IBM API Connect is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionali...