CVE-2023-7180 Tongda OA 2017 delete.php sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. The exploit has been disclosed to the...

conseilmac.fr Improper Access Control vulnerability OBB-3824409

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cloud Atlas Exploits Six-Year-Old Flaw to Target Russian Companies

Summary: The threat actor Cloud Atlas has been identified in spear-phishing attacks targeting Russian enterprises. The modus operandi involves a phishing message in the initial stage, containing a lure document that exploits CVE-2017-11882, a memory corruption vulnerability in Microsoft Offices...

Cloud Atlas' Spear-Phishing Attacks Target Russian Agro and Research Companies

The threat actor referred to as Cloud Atlas has been linked to a set of spear-phishing attacks on Russian enterprises. Targets included a Russian agro-industrial enterprise and a state-owned research company, according to a report from F.A.C.C.T., a standalone cybersecurity company formed after...

8220 Gang Targets Telecom and Healthcare in Global Cryptojacking Attack

By Deeba Ahmed The 8220 gang, believed to be of Chinese origins, was first identified in 2017 by Cisco Talos when they targeted Drupal, Hadoop YARN, and Apache Struts2 applications for propagating cryptojacking malware. This is a post from HackRead.com Read the original post: 8220 Gang Targets...

SUSE-SU-2023:4941-1 Security update for poppler

This update for poppler fixes the following issues: - CVE-2017-7511: Fixed a NULL pointer dereference in pdfunite bsc1041783 - CVE-2018-20662: PDFDoc setup in PDFDoc.cc allows attackers to cause DOS because of a wrong return value from PDFDoc:setup bsc1120956...

Hackers Exploiting MS Excel Vulnerability to Spread Agent Tesla Malware

Attackers are weaponizing an old Microsoft Office vulnerability as part of phishing campaigns to distribute a strain of malware called Agent Tesla. The infection chains leverage decoy Excel documents attached in invoice-themed messages to trick potential targets into opening them and activate the...

CVE-2023-7023

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2023-7023 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2023-7022 Tongda OA 2017 delete_all.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/workplan/manage/deleteall.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be launched...

CVE-2023-7022

CVE-2023-7022 affects Tongda OA 2017 up to 11.9. The vulnerability resides in the file general/work_plan/manage/delete_all.php, where altering the parameter DELETE_STR enables SQL injection. It can be exploited remotely over the network, and the exploit has been disclosed publicly. Multiple sourc...

CVE-2023-7021

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been classified as critical. Affected is an unknown function of the file general/vehicle/checkup/deletesearch.php. The manipulation of the argument VUID leads to sql injection. It is possible to launch the attack remotely. The exploit...

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. This issue affects some unknown processing of the file general/wiki/cp/ct/view.php. The manipulation of the argument TEMPID leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

CVE-2023-7021 Tongda OA 2017 delete_search.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been classified as critical. Affected is an unknown function of the file general/vehicle/checkup/deletesearch.php. The manipulation of the argument VUID leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2023-7020 Tongda OA 2017 view.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. This issue affects some unknown processing of the file general/wiki/cp/ct/view.php. The manipulation of the argument TEMPID leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

CVE-2017-16905

creationtimestamp| type| source ---|---|--- 2023-12-18 13:49:33+00:00| seen| https://t.me/arpsyndicate/1996...

CVE-2017-5244

creationtimestamp| type| source ---|---|--- 2023-12-18 13:18:34+00:00| seen| https://t.me/arpsyndicate/1993...

CVE-2017-17689

creationtimestamp| type| source ---|---|--- 2023-12-18 11:51:32+00:00| seen| https://t.me/arpsyndicate/1976...

CVE-2017-7672

creationtimestamp| type| source ---|---|--- 2023-12-18 10:44:24+00:00| seen| https://t.me/arpsyndicate/1966...

CVE-2017-0782

creationtimestamp| type| source ---|---|--- 2023-12-18 09:58:25+00:00| seen| https://t.me/arpsyndicate/1960 2026-07-26 07:01:58+00:00| seen| https://t.me/KaitNews/5803 2026-07-27 00:01:40+00:00| seen| https://t.me/KaitNews/5803 2026-07-29 12:03:24+00:00| published-proof-of-concept|...