BEQ BillQuick Web Suite SQL注入漏洞

BEQ BillQuick Web Suite is a time and billing system from BEQ USA. BQE BillQuick Web Suite suffers from a SQL injection vulnerability that stems from BQE BillQuick Web Suite 2018 through 2021 allows SQL injection to be used for unauthenticated remote code execution, such as that exploited in the...

CVE-2021-35543

creationtimestamp| type| source ---|---|--- 2021-10-20 14:41:15+00:00| seen| https://t.me/cibsecurity/30869...

CVE-2021-30292

creationtimestamp| type| source ---|---|--- 2021-10-20 12:35:09+00:00| seen| https://t.me/cibsecurity/30852...

CVE-2021-35543

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-31380

creationtimestamp| type| source ---|---|--- 2021-10-19 22:39:28+00:00| seen| https://t.me/cibsecurity/30836...

CVE-2021-41556

creationtimestamp| type| source ---|---|--- 2021-10-19 17:14:06+00:00| seen| https://t.me/thehackernews/1594 2022-07-29 00:12:46+00:00| seen| https://t.me/cibsecurity/47244...

CVE-2021-36387

In Yellowfin before 9.6.1 there is a Stored Cross-Site Scripting vulnerability in the video embed functionality exploitable through a specially crafted HTTP POST request to the page "ActivityStreamAjax.i4"...

Yellowfin Business Intelligence Yellowfin 跨站脚本漏洞

Yellowfin is a business intelligence automated analytics, cross-vendor narrative and collaboration software suite. A stored cross-site scripting vulnerability exists in the video embedding feature in Yellowfin versions prior to 9.6.1. An attacker can exploit this vulnerability by sending a...

DEBIAN-CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

Improper access control

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

UBUNTU-CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

CVE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

CVE-2021-33727

creationtimestamp| type| source ---|---|--- 2021-10-12 14:25:24+00:00| seen| https://t.me/cibsecurity/30376...

Sap SuccessFactors 安全漏洞

Sap SuccessFactors is a cloud-based Hcm software application from SAP, Germany. A security vulnerability exists in the SAP SuccessFactors Android application prior to version 2108, which stems from a problem with the way the Android application is implemented. The vulnerability allows an attacker...

Iran-linked DEV-0343 targeting defense, GIS, and maritime sectors

DEV-0343 is a new activity cluster that the Microsoft Threat Intelligence Center MSTIC first observed and began tracking in late July 2021. MSTIC has observed DEV-0343 conducting extensive password spraying against more than 250 Office 365 tenants, with a focus on US and Israeli defense technolog...

Attack Campaigns Ramp Up for Organizations Down Under

DDoS and AppSec attacks impacting the ANZ region Australia and New Zealand have been in the headlines of late, with several high profile companies seeing prolonged outages and leading to speculation as to whether the region is being specifically targeted? Let’s take a closer look at the types of...

CVE-2021-0692

In sendBroadcastToInstaller of FirstScreenBroadcast.java, there is a possible activity launch due to an unsafe PendingIntent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...