CVE-2021-3120

An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must ...

Kangtaike SolarView Compact SV-CPT-MC310 OS Command Injection Vulnerability

Kangtaike SolarView Compact is an application system from Kangtaike, Japan. Kangtaike SolarView Compact SV-CPT-MC310 contains an operating system command injection vulnerability that could be exploited by an attacker to execute arbitrary operating system commands with Web server privileges via...

Command Execution Vulnerability in Douxin of Shenzhen Renxin Technology Co.

Douxin is a WeChat open framework developed by Shenzhen Renxin Technology Co. A command execution vulnerability exists in Shenzhen RenWant Technology Limited Douxin, which can be exploited by an attacker to gain control of a web server...

LiteSpeed Web Server Enterprise Command Injection

A command injection vulnerability exists in LiteSpeed Web Server Enterprise. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2020-29022

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...

CVE-2020-29025

A vulnerability in SiteManager-Embedded SM-E Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. Thi...

Design/Logic Flaw

A vulnerability in SiteManager-Embedded SM-E Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. Thi...

Design/Logic Flaw

Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3...

CVE-2020-29025 DOM-based Javascript injection

A vulnerability in SiteManager-Embedded SM-E Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. Thi...

CVE-2020-29025

CVE-2020-29025 affects the SiteManager-Embedded (SM-E) Web server. It describes a DOM-based JavaScript injection where an attacker can construct a URL that, if visited by another application user, executes attacker-supplied JavaScript in that user’s browser within their session context. Affected:...

CVE-2020-29022

CVE-2020-29022 affects Secomea GateManager (all versions prior to 9.3). The vulnerability is due to failure to sanitize the host header value on output in the GateManager Web server, which could allow web cache poisoning attacks. Impact is described as enabling manipulation of cached responses to...

Glovo: Server Side Template Injection on Name parameter during Sign Up process

Summary: Server-side template injection is when an attacker is able to use native template syntax to inject a malicious payload into a template, which is then executed server-side. In this scenario, when an attacker signs up on the platform and uses a payload in the First Name field, the payload ...

SiteManager-Embedded Web server Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in SiteManager-Embedded Web server, which stems from a lack of proper validation of client-side data by the WEB application. An attacker could exploit this vulnerability to execute client-side code...

CVE-2021-3239

E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell...

CVE-2021-3239

E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell...

Mongoose Web Server < 7.1 Multiple Vulnerabilities

Mongoose Web Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

CVE-2020-27862

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update

Updated Red Hat JBoss Web Server 5.4.1 packages are now available for Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Moderate: Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update

Red Hat JBoss Web Server 5.4.1 zip release is now available for Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows. Red Hat Product Security has rated this release as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...