Cisco Small Business 命令注入漏洞

Cisco Small Business is a switch from Cisco. Cisco Small Business suffers from a command injection vulnerability that stems from incorrect authentication provided to the user. An attacker could exploit this vulnerability to perform command injection in an attack on an affected device. The followi...

SQL Injection Vulnerability in Shipping 100 Autoship System

Shipping 100 is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in the Shipment 100 Autoship System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Arbitrary File Read Vulnerability in Shipping 100 Virtual Goods Autoship System

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. An arbitrary file read vulnerability exists in the Ship 100 Virtual Goods Autoship System. An attacker can exploit this vulnerability to read arbitrary files...

[SECURITY] Fedora 32 Update: kernel-tools-5.11.19-100.fc32

This package contains the tools/ directory from the kernel source and the supporting documentation...

[SECURITY] Fedora 32 Update: kernel-5.11.19-100.fc32

The kernel meta package...

The vulnerability of the implementation of the SSL VPN micro-programming software for network interfaces of the SMA 100 series, which allows a intruder to gain unauthorized access to protected information.

The vulnerability of the implementation of the SSL VPN micro-programming system for network interfaces of SONICWALL series SMA 100 is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

[SECURITY] Fedora 32 Update: kernel-5.11.18-100.fc32

The kernel meta package...

CVE-2021-29350

SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/productadd.php...

CVE-2021-29350

CVE-2021-29350 affects 发货100-设计素材下载系统 1.1. The SQL injection is in the getip function of conn/function.php, exploitable via the X-Forwarded-For header to admin/product_add.php. Several connected sources confirm the vulnerable endpoint and function. PTSecurity notes no available fix and suggests m...

CVE-2021-29350

SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/productadd.php...

PT-2021-18177 · Unknown · 发货100-设计素材下载系统

Name of the Vulnerable Software and Affected Versions: 发货100-设计素材下载系统 version 1.1 Description: The issue allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to the "admin/product add.php" endpoint. This is due to a SQL injection in the getip function in...

D-Link DIR-100 has a weak password vulnerability

The D-Link DIR-100 is a SOHO broadband router. A weak password vulnerability exists in the D-Link DIR-100, which can be exploited by an attacker to obtain sensitive information...

RSS for Yandex Turbo < 1.30 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin did not properly sanitise the user inputs from its Счетчики settings tab before outputting them back in the page, leading to authenticated stored Cross-Site Scripting issues PoC As admin, Navigate to Setting Яндекс.Турбо Счетчики and enter a payload such as " onmouseover="alert1 into a...

SUSE: Security Advisory (SUSE-SU-2020:0523-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2118-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:2687-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1798-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2019:3370-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Researcher release PoC exploit for 0-day in Chrome, Edge, Brave, Opera

By Deeba Ahmed The issue was demonstrated at the Pwn2Own 2021 hacking contest in which researchers won $100,000 for exploiting this flaw in Chrome and Edge. This is a post from HackRead.com Read the original post: Researcher release PoC exploit for 0-day in Chrome, Edge, Brave, Opera...

SQL Injection Vulnerability in Shipment 100 Virtual Goods Auto-shipment System (CNVD-2021-30193)

Shipping 100 Virtual Goods Autoship System is a powerful virtual goods autoship system/article pay to read system. Shipping 100 Virtual Goods Autoship System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...