Authentication flaw

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

The vulnerability of the Web Server Plugin component of the Oracle Access Manager software, which allows attackers to create, delete, or modify access rights to protected information, or gain read-only access to data.

The vulnerability of the Web Server Plugin component of the Oracle Access Manager software component of the Oracle Fusion Middleware platform is related to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker to create, delete, or modify access rights...

CVE-2021-21330 Open redirect vulnerability in aiohttp

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the...

CVE-2021-21330

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the...

File Upload Vulnerability in OurPHP Admin Backend

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. A file upload vulnerability exists in the administrative backend of OurPHP, which allows attackers to gain control of the web server...

aiohttp -- open redirect vulnerability

Sviatoslav Sydorenko reports: Open redirect vulnerability — a maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the aiohttp.webmiddlewares.normalizepathmiddleware middleware...

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

Design/Logic Flaw

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

CVE-2021-20658

SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors...

File Upload Vulnerability in the Cloud Platform of Teaching Video Application of Guangzhou Aoweiya Electronic Technology Co.

Teaching video application cloud platform is based on the background of the current educational video resources construction and user demand research, developed to adapt to the development of the times and meet the needs of the school, with the effectiveness, multi-functional, distinctive feature...

Aggressive 750W Command Execution Vulnerability in Shanghai Atech Technology Co.

Ltd. Aggressive 750W is an enterprise-grade wireless router. A command execution vulnerability exists in the Atech Shanghai Aggressive 750W, which can be exploited by an attacker to gain control of a web server...

Design/Logic Flaw

An issue was discovered in RouterNanoHTTPD.java in NanoHTTPD through 2.3.1. The GeneralHandler class implements a basic GET handler that prints debug information as an HTML page. Any web server that extends this class without implementing its own GET handler is vulnerable to reflected XSS, becaus...

CVE-2020-13697

NanoHTTPD (RouterNanoHTTPD.java, GeneralHandler) through version 2.3.1 is vulnerable to reflected XSS because the GET handler prints unsanitized query-string input into an HTML page. Multiple sources (NVD, CVE-2020-13697 records; Veracode and GHSA advisories; OSV/CVE records) describe this XSS is...

Apache Flink JAR Upload Java Code Execution Exploit

This Metasploit module uses job functionality in the Apache Flink dashboard web interface to upload and execute a JAR file, leading to remote execution of arbitrary Java code as the web server user. This module has been tested successfully on Apache Flink versions: 1.9.3 on Ubuntu 18.04.4; 1.11.2...

YITH WooCommerce Gift Cards Premium < 3.3.1 - RCE via Arbitrary File Upload

"An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium before 3.3.1 allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must be able to place a...

Oracle iPlanet Web Server Authentication Bypass (CVE-2020-9315)

An authentication bypass vulnerability exists in Oracle iPlanet Web Server. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Design/Logic Flaw

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...

CVE-2021-3120

CVE-2021-3120 affects the WordPress plugin YITH WooCommerce Gift Cards Premium (versions prior to 3.3.1). The vulnerability is an arbitrary file upload leading to RCE , triggered when a valid Gift Card product is added to the cart and the parameter ywgc-upload-picture accepts a PHP file, storing ...

CVE-2021-3120

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...