What are Hung Threads and why is the StreamProcess terminating?

On PVS Servers StreamProcess Hung Threads can lead to poor performance, constant target re-connections and even full outages. These Hung Threads are usually detected by looking at the Windows Application Event logs. The following Events will be recorded: Level| Source| Id| Text ---|---|---|---...

Dell EMC Data Protection Advisor Local Hardcoded Credential Information Disclosure Vulnerability

Dell EMC Data Protection Advisor is a suite of data protection management solutions from Dell USA. The solution supports automated and centralized execution of all such data collection and analysis, as well as obtaining a single comprehensive view of the data protection environment and activities...

CVE-2018-1206

Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 and Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 contain a hardcoded database account with administrative privileges. The affected account is "apollosuperuser." An attacker with local access to the server where D...

PT-2018-10978

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Advisor versions prior to 6.3 Patch 159 Dell EMC Data Protection Advisor versions prior to 6.4 Patch 110 Description The issue concerns a hardcoded database account with administrative privileges, specifically the...

Bacula-Web < 8.0.0-rc2 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Multiple SQL injection vulnerabilities in Bacula-Web Date: 2018-03-07 Software Link: http://bacula-web.org/ Exploit Author: Gustavo Sorondo Contact: http://twitter.com/iampuky Website: http://cintainfinita.com/ CVE: CVE-2017-153...

Bacula-web SQL Injection Vulnerability

Bacula-Web is a suite of web-based applications for reporting and monitoring Bacula backup software. A SQL injection vulnerability exists in Bacula-Web versions prior to 8.0.0-rc2. A remote attacker could exploit this vulnerability to access the Bacula database and elevate privileges...

CVE-2018-1387: Exposure of Sensitive Information to an Unauthorized Actor

IBM Application Performance Management for Monitoring & Diagnostics IBM Monitoring 8.1.3 and 8.1.4 may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210...

SQL Injection Vulnerability in xycms Advertising Design Center Website System

xycms advertising design center website system is to asp + access for the development of advertising company website. A SQL injection vulnerability exists in the xycms Advertising Design Center website system. The vulnerability stems from the program's failure to effectively filter the variable...

Sql injection

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

CVE-2017-15367

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

CVE-2017-15367

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

PT-2018-5806

Name of the Vulnerable Software and Affected Versions: Bacula-web versions prior to 8.0.0-rc2 Description: The issue allows an attacker to access the Bacula database through SQL Injection vulnerabilities. Depending on the configuration, this could potentially escalate privileges on the server...

CVE-2017-15367: Improper Neutralization of Special Elements used in an SQL Command

Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server...

PT-2018-12341

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.5 through 7.6 Description The issue allows a remote attacker to send specially-crafted SQL statements, potentially enabling them to view, add, modify, or delete information in the back-end database...

SQL Injection Vulnerability in PHP Version of Rex Design Website Building System

R&S Design is an Internet solution provider in Guangdong, focusing on the study of the development status of small and medium-sized enterprises around the world, and is committed to promoting enterprises to embark on the road of comprehensive informatization. Rui Si Design website construction...

CVE-2017-15536

An issue was discovered in Cloudera Data Science Workbench CDSW 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW. CDSW users can exploit these vulnerabilities in combination to gain root access to CDSW nodes, gain...

SQL Injection Vulnerability in ShopsN v2.2.5 Official Version

ShopsN Mall system is a product of Shanghai Yiso Network Technology Co., Ltd, an enterprise-class commercial standard full-featured allow free commercial use of the open source online store full network system. ShopsN v2.2.5 official version of the AppUploadController.class.php page SQL injection...

SQL Injection Vulnerability in zzcms 8.2 user/msg.php File

zzcms is an enterprise website builder program It is an enterprise website builder program. An SQL injection vulnerability exists in the user/msg.php file of zzcms version 8.2, which can be exploited by attackers to access or modify database information...

SQL Injection Vulnerability in zzcms 8.2 user/del.php File

zzcms is an enterprise website builder program It is an enterprise website builder program. zzcms 8.2 version user/del.php file SQL injection vulnerability, attackers can exploit the vulnerability to access or modify the database data...

SQL Injection Vulnerability in zzcms 8.2 user/check.php File

zzcms is an enterprise website builder program It is an enterprise website builder program. An SQL injection vulnerability exists in the user/check.php file of zzcms version 8.2, which can be exploited by attackers to access or modify database data...