Codecat - Tool To Help In Manual Analysis In Codereview

CodeCat is a open source tool to help you in codereview, to find/track sinks and this points follow regex rules... How too install, step by step: Go to CodeCat directory, install backend and frontend libs: $ cd Front $ sudo python3 -m pip install -r requirements.txt $ cd .. $ cd Backend $ sudo...

SQL injection vulnerability in X5music V2.0 backend cl***.php page

x5music Free Edition is an audio-visual management system developed using php+Mysql. X5music V2.0 backend cl.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

EulerOS Virtualization for ARM 64 3.0.2.0 : gcc (EulerOS-SA-2019-2308)

According to the version of the gcc packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - This is compiler for arm64. Security Fixes:The POWER9 backend in GNU Compiler Collection GCC before version 10 could optimiz...

CVE-2019-19316

When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...

Design/Logic Flaw

When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...

CVE-2019-19316

When using the Azure backend with a shared access signature SAS, Terraform versions prior to 0.12.17 may transmit the token and state snapshot using cleartext HTTP...

SQL injection vulnerability in the background of zzphp website builder system

zzcms is a free website builder developed in asp language. There are SQL injection vulnerabilities in the backend of zzzzphp website builder system, which can be exploited by attackers to obtain sensitive information from the database...

PT-2019-15807 · Hashicorp +1 · Terraform +1

Name of the Vulnerable Software and Affected Versions: Terraform versions prior to 0.12.17 Description: The issue concerns the transmission of sensitive data in cleartext HTTP when using the Azure backend with a shared access signature SAS in Terraform. This affects the...

SQL injection vulnerability in the Ta***.cl***.php file in the backend of Dream CMS

Dream CMS short for "lmxcms" is an open source website management system cms with no license restrictions. A SQL injection vulnerability exists in the Ta.cl.php file in the background of Dream CMS. Attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Super CMS Content Management System Backend

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

CVE-2019-7319

CVE-2019-7319 affects Cloudera Hue 6.0.0–6.1.0. When using authentication backends LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users can be created with superuser privileges. This indicates a potential privilege-esc...

SQL Injection Vulnerability in LJCMS Backend ad***.php Page

LJCMS is a free and open source content management system. A SQL injection vulnerability exists in the ad.php page of LJCMS backend. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the ca***.php file of Yunye CMS Backend

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the background ca.php file of Yunye CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

IBM Sterling B2B Integrator SQL Injection Vulnerability (CNVD-2019-44534)

IBM Sterling B2B Integrator is a suite of software from IBM USA that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A SQL injection vulnerability exists in IBM Sterling B2B...

SQL Injection Vulnerability in RGcms Backend

RGcms is an open source building management system , written in PHP language , the system features free , extended , extremely fast security , free and open source . RGcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SQL injection vulnerability in the backend ge***.cl***.php file of Laikai E-commerce system

Laike e-commerce system is an open source e-commerce system. Laike e-commerce system backend ge.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

Code execution vulnerability in the backend of shopxo e-commerce system

ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system backend code execution vulnerability , an attacker can exploit the vulnerability to execute arbitrary PHP code...

Code execution vulnerability in Ag***.php page template in backend of shopxo e-commerce system

ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system backend Ag.php page template code execution vulnerability , an attacker can exploit the vulnerability to execute arbitrary PHP code...

File upload vulnerability in the backend of shopxo e-commerce system

ShopXO is an open source enterprise-level open source e-commerce system. shopxo e-commerce system backend file upload vulnerability , an attacker can exploit the vulnerability to execute arbitrary PHP code...

SQL Injection Vulnerability in Super Cms v2.39 in***.ma***.php Page

Super CMS content management system in order to solve the problem of website optimization and development of a set of products, it is an efficient open source content management system, the product is based on PHP + MYSQL architecture, can run on Windows, Linux, MacOSX, Solaris and other various...