CVE-2022-30413

Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=deleteapplication...

CVE-2021-46787

The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash...

XML External Entity (XXE) Injection

WSO2 Identity Application Management Component is vulnerable to XML external entity attacks. The vulnerability exists in unmarshalSP function in ApplicationManagementServiceImpl.java because the SP file content is not parsed securely during unmarshalling which allows an attacker to gain access to...

WordPress SpiderCatalog plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress SpiderCatalog plugin 1.7.3 and earlier versions, which stems...

Command Execution Vulnerability in Zero Degrees of Space at Jiangyin Leader Information Technology Co.

Jiangyin Leader Information Technology Co., Ltd. was founded in 2006 by visiting scholars from the University of Copenhagen, Denmark, is a high-tech enterprise specializing in the development of application management software and Internet application technology development. Jiangyin City Leader...

How to Automatically Move Applications to Start Menu Using Receiver for Windows 4.0 and 4.1

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to automatically move applications to the Start menu using Receiver for...

Adobe Creative Cloud Desktop Application Input Validation Improperity Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An improper input validation vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker could exploit the vulnerability to elevate...

360 Secure Desktop suffers from dll hijacking vulnerability

360 Secure Desktop is a desktop application management software that helps you better organize your computer desktop documents and settings. 360 Secure Desktop has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

The vulnerability of the Windows Enterprise application management service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows Enterprise application management service is related to file operation processing errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Chinese APT group targets India and Hong Kong using new variant of MgBot malware

This blog post was authored by Hossein Jazi and Jérôme Segura On July 2, we found an archive file with an embedded document pretending to be from the government of India. This file used template injection to drop a malicious template which loaded a variant of Cobalt Strike. One day later, the sam...

Qulture.Rocks: Privilege escalation from member user ( editor ) to admin user

Qulture.Rocks has multiple levels of admins, where you could manage parts of the application. One of those levels had a wrong configuration, which did not blocked it from updating its level to a higher one. Our team worked rapidly to fix this issue, blocking said level of updating itself...

Security Bulletin: IBM Application Performance Management could allow a remote attacker to hijack the clicking action of the victim (CVE-2019-4086)

Summary IBM Application Performance Management could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attac...

The vulnerability of the secomp component of the application management tools and Flatpak environments allows a attacker to elevate their privileges and execute arbitrary code.

The vulnerability of the secomp component in application management tools and Flatpak environments is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to increase their privileges and execute arbitrary code...

CVE-2019-4131

IBM Application Performance Management IBM Monitoring 8.1.4 could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270...

Security Bulletin: A reflected cross-site scripting (XSS) vulnerability affects IBM Performance Management products

Summary A reflected cross-site scripting XSS vulnerability was found in Application Performance Management. Cross-Site Scripting XSS attacks occur when data enters a Web application through an untrusted source, most frequently a web request and the data is included in dynamic content that is sent...

Unspecified Vulnerability in Oracle E-Business Suite Application Management Pack for Oracle E-Business Suite

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation.Application Management Pack AMP for Oracle E-Business Suite is one of the extensions of the Application Management Pack AMP for Oracle E-Business Suite is one of the application...

CVE-2018-3167

Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite subcomponent: User Monitoring. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated...

Code injection

Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite subcomponent: User Monitoring. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated...

CVE-2018-3167: Undefined Security Weakness

Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite subcomponent: User Monitoring. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated...

Security Bulletin: IBM Forms Experience Builder vulnerable to CSRF when configured with non default settings (CVE-2016-2884)

Summary A cross-site request forgery attack is possible when configured with non default settings, caused by improper validation of user-supplied input. Vulnerability Details CVEID: CVE-2016-2884 DESCRIPTION: IBM Forms Experience Builder is vulnerable to cross-site request forgery, when configure...