🔵File upload vulnerability exists in CatfishCMS:
https://dailycve.com/file-upload-vulnerability-exists-catfishcms
https://dailycve.com/file-upload-vulnerability-exists-catfishcms
Dailycve
File upload vulnerability exists in CatfishCMS | CVE
Details:
Catfish CMS is a PHP content management framework which is free and open source.
CatfishCMS has a weakness for file transfer, which can be used to access server access permissions by attackers.
References:
http://www.catfish-cms.com/
🔵Mblog open source Java blog system has logic flaws:
https://dailycve.com/mblog-open-source-java-blog-system-has-logic-flaws
https://dailycve.com/mblog-open-source-java-blog-system-has-logic-flaws
Dailycve
Mblog open source Java blog system has logic flaws | CVE
Details:
Mblog is an open source and free blog system built in the Java language, using spring-boot, jpa, shiro, bootstrap and other common frameworks to support the mysql/h2 database.
The Mblog open source Java blog framework has a weakness with a…
🔵Vientiane webmaster 2008 enhanced version has dll hijacking vulnerability:
https://dailycve.com/vientiane-webmaster-2008-enhanced-version-has-dll-hijacking-vulnerability
https://dailycve.com/vientiane-webmaster-2008-enhanced-version-has-dll-hijacking-vulnerability
Dailycve
Vientiane webmaster 2008 enhanced version has dll hijacking vulnerability | CVE
Details:
Vientiane Site Management is a management platform suitable for Internet cafe owners developed by Vientiane.
There is a DLL hijacking flaw in the improved version of Vientiane Network Management 2008. This vulnerability can be used by attackers…
🔵PDF cat split and merge software has dll hijacking vulnerability:
https://dailycve.com/pdf-cat-split-and-merge-software-has-dll-hijacking-vulnerability
https://dailycve.com/pdf-cat-split-and-merge-software-has-dll-hijacking-vulnerability
Dailycve
PDF cat split and merge software has dll hijacking vulnerability | CVE
Details:
PDF cat split and merge software is a software that merges PDF files.
A dll hijacking vulnerability is available for the PDF cat break and merge applications. This vulnerability can be exploited by attackers to load the dll without signature…
BlackBerry sold 90 primary patents to Huawei for smartphones.
#International
MORE DETAILS - https://undercodenews.com/blackberry-sold-90-primary-patents-to-huawei-for-smartphones/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/blackberry-sold-90-primary-patents-to-huawei-for-smartphones/14/01/2021/
The $2.1 billion purchase of Fitbit by Google is eventually complete: set sail again.
#International
MORE DETAILS - https://undercodenews.com/the-2-1-billion-purchase-of-fitbit-by-google-is-eventually-complete-set-sail-again/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/the-2-1-billion-purchase-of-fitbit-by-google-is-eventually-complete-set-sail-again/14/01/2021/
A alert will show on iPhones that use non-original cameras, beginning with iOS 14.4.
#Updates
MORE DETAILS - https://undercodenews.com/a-alert-will-show-on-iphones-that-use-non-original-cameras-beginning-with-ios-14-4/14/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/a-alert-will-show-on-iphones-that-use-non-original-cameras-beginning-with-ios-14-4/14/01/2021/
The macOS beta edition of Apple started abandoning its own components to circumvent the whitelist of the firewall by default.
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/the-macos-beta-edition-of-apple-started-abandoning-its-own-components-to-circumvent-the-whitelist-of-the-firewall-by-default/14/01/2021/
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/the-macos-beta-edition-of-apple-started-abandoning-its-own-components-to-circumvent-the-whitelist-of-the-firewall-by-default/14/01/2021/
🔵Vulnerabilities in input validation errors in many Cisco products:
https://dailycve.com/vulnerabilities-input-validation-errors-many-cisco-products
https://dailycve.com/vulnerabilities-input-validation-errors-many-cisco-products
Dailycve
Vulnerabilities in input validation errors in many Cisco products | CVE
Details:
The Cisco RV110W, etc. is all a US Cisco router (Cisco). There is an input validation error limitation in Cisco Small Business Routers, which derives from inadequate input validation in the site management gui. This vulnerability can be used…
🔵Cisco Small Business Routers input validation error vulnerability:
https://dailycve.com/cisco-small-business-routers-input-validation-error-vulnerability
https://dailycve.com/cisco-small-business-routers-input-validation-error-vulnerability
Dailycve
Cisco Small Business Routers input validation error vulnerability | CVE
Details:
The Cisco RV110W, etc. is all a US Cisco router (Cisco). There is an input validation error flaw in Cisco Small Business Routers that stems from inaccurate validation of user-provided input in the site management interface. This vulnerability…
Amazon is facing a hard situation for complaints to revoke, consumers ask regulators to investigate.
#International
MORE DETAILS - https://undercodenews.com/amazon-is-facing-a-hard-situation-for-complaints-to-revoke-consumers-ask-regulators-to-investigate/15/01/2021/
#International
MORE DETAILS - https://undercodenews.com/amazon-is-facing-a-hard-situation-for-complaints-to-revoke-consumers-ask-regulators-to-investigate/15/01/2021/
In 2021, where unseen individuals will change the world, I realized the difficulty of talking about the Internet.
#Analytiques
MORE DETAILS - https://undercodenews.com/in-2021-where-unseen-individuals-will-change-the-world-i-realized-the-difficulty-of-talking-about-the-internet/15/01/2021/
#Analytiques
MORE DETAILS - https://undercodenews.com/in-2021-where-unseen-individuals-will-change-the-world-i-realized-the-difficulty-of-talking-about-the-internet/15/01/2021/
Phison launches today a bridge U17/U18 and entry-level NVMe SSD master E21T.
#Technologies
MORE DETAILS - https://undercodenews.com/phison-launches-today-a-bridge-u17-u18-and-entry-level-nvme-ssd-master-e21t/15/01/2021/
#Technologies
MORE DETAILS - https://undercodenews.com/phison-launches-today-a-bridge-u17-u18-and-entry-level-nvme-ssd-master-e21t/15/01/2021/
🔵unpatched SQL injection vulnerability exists in EQ enterprise management system:
https://dailycve.com/unpatched-sql-injection-vulnerability-exists-eq-enterprise-management-system
https://dailycve.com/unpatched-sql-injection-vulnerability-exists-eq-enterprise-management-system
Dailycve
unpatched SQL injection vulnerability exists in EQ enterprise management system | CVE
Details:
Guangzhou Yiquan Information Technology is an Internet SAAS provider which specializes in providing small and medium enterprises with online management software.
There's a SQL injection flaw in the EQ business management system. The flaw may…
🔵Cscms has command execution vulnerability:
https://dailycve.com/cscms-has-command-execution-vulnerability
https://dailycve.com/cscms-has-command-execution-vulnerability
Dailycve
Cscms has command execution vulnerability | CVE
Details:
Cheng's CMS-cscms is a diversified content management system that uses PHP5+MYSQL as the technical basis for development and the core operating structure is developed using OOP (object-oriented).
In order to gain control of the server, Cscms…
🔵YKBuilder V5.1 has a binary vulnerability:
https://dailycve.com/ykbuilder-v51-has-binary-vulnerability
https://dailycve.com/ykbuilder-v51-has-binary-vulnerability
Dailycve
YKBuilder V5.1 has a binary vulnerability | CVE
Details:
YKBuilder is a platform that is suitable for embedded integrated development construction.
The binary bugs in YKBuilder V5.1 are current. This flaw can be used by attackers to build malformed files and cause the software to crash.
Affected…
1,1k global public vulnerabilities have been reported and more than 5 billion documents have been leaked in 2020.
#Analytiques
MORE DETAILS - https://undercodenews.com/11k-global-public-vulnerabilities-have-been-reported-and-more-than-5-billion-documents-have-been-leaked-in-2020/15/01/2021/
#Analytiques
MORE DETAILS - https://undercodenews.com/11k-global-public-vulnerabilities-have-been-reported-and-more-than-5-billion-documents-have-been-leaked-in-2020/15/01/2021/
LG U+ announces that South Korea will begin the full end of 2G networks, and will close its network in June.
#Technologies
MORE DETAILS - https://undercodenews.com/lg-u-announces-that-south-korea-will-begin-the-full-end-of-2g-networks-and-will-close-its-network-in-june/15/01/2021/
#Technologies
MORE DETAILS - https://undercodenews.com/lg-u-announces-that-south-korea-will-begin-the-full-end-of-2g-networks-and-will-close-its-network-in-june/15/01/2021/
🔵SAP 3D Visual Enterprise Viewer buffer overflow vulnerability:
https://dailycve.com/sap-3d-visual-enterprise-viewer-buffer-overflow-vulnerability
https://dailycve.com/sap-3d-visual-enterprise-viewer-buffer-overflow-vulnerability
Dailycve
SAP 3D Visual Enterprise Viewer buffer overflow vulnerability | CVE
Details:
SAP 3D Visual Business Viewer is a 3D visual viewer from Germany's SAP group. The software facilitates the publication of 2D and 3D scenes in all common desktop applications in the market, and supports separate installation of ActiveX space and…