CVE-2019-6548

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user...

CVE-2019-6548

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user...

Hardcoded credentials

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user...

CVE-2019-6548

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user...

CVE-2019-6548: Use of Hard-coded Credentials

GE Communicator, all versions prior to 4.0.517, contains two backdoor accounts with hardcoded credentials, which may allow control over the database. This service is inaccessible to attackers if Windows default firewall settings are used by the end user...

U.S. Dept Of Defense: SQL Injection in ████

Summary There is an SQL injection vulnerability in ████████ in the /█████/recruiter/updapp.aspx page, exploitable through the appid form parameter. Impact An attacker could use this vulnerability to control the content in the database, exfiltrate information, and obtain remote code execution...

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server allows a hacker to gain full control over the DBMS.

The vulnerability of the Core RDBMS component of the database management system Oracle Database Server is related to insufficient access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full control over the DBMS using Oracle Net...

U.S. Dept Of Defense: SQL Injection in ████

Summary: There is an SQL injection vulnerability in the SSN field at https://██████████/████/candidateapp/statusscholarship.aspx Impact An attacker could use this vulnerability to control the content in the database, exfiltrate information, and potentially obtain remote code execution. Step-by-st...

SQL Injection in WeBid

High-Tech Bridge Security Research Lab discovered SQL Injection vulnerability in a poplar web auction software WeBid. The vulnerability can be exploited by remote non-authenticated attacker to alter present SQL query and execute arbitrary SQL commands in application's database. Successful...

LuManager high-risk SQL injection 0day analysis-vulnerability warning-the black bar safety net

2 0 1 5 year 9 month 7 day Ali cloud shield situational awareness system captures the LuManager system of 0day a gold that confirmed that the vulnerabilities once a hacker can use directly to the highest authority of the login background, upload webshell, the control system database, the operatio...

XDB buffer overflow vulnerability turned out to be subversive of the entire database? - Vulnerability warning-the black bar safety net

This article will show you a hacked database approach, hoping to arouse the vigilance. Want to know hacking the database of the method of the first to delve into hacking the database of the object. After an investigation found the hacker the intruder the intrusion database the ultimate goal of...

DVWA learn PHP Common Vulnerabilities and repair method-vulnerability warning-the black bar safety net

“Security is a whole, to ensure that security is not to powerful where there is more powerful and that the real weakness of the place where the”--Kenshin From a lot of the penetration of large enterprises within the network of cases of view, the intruder most from on the Web to find the...

CVE-2013-0373

CVE-2013-0373 affects Oracle Enterprise Manager products: EM Base Platform 10.2.0.5 and 11.1.0.1; EM Database Control 10.2.0.3/4/5, 11.1.0.7, 11.2.0.2/3; and EM Plugin for DB 12.1.0.1/12.1.0.2. The vulnerability is SQL Injection in the OEM streams queue path, enabling remote exploitation to execu...

Group Office Calendar - calendarjson.php SQL Injection

Group Office Calendar - calendarjson.php SQL Injection /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection...

TCExam Edit SQL Injection

/--------------------------- | TCExam Edit SQL Injection | ---------------------------/ Summary ======= TCExam 11.3.007 is prone to a SQL injection flaw located in tceeditanswer.php and tceeditquestion.php. These files pass a 'subjectmoduleid' parameter into a SQL statement without satisfactory...

TCExam 11.3.007 SQL Injection

/---------------------------\ | TCExam Edit SQL Injection | ---------------------------/ Summary ======= TCExam 11.3.007 is prone to a SQL injection flaw located in tceeditanswer.php and tceeditquestion.php. These files pass a 'subjectmoduleid' parameter into a SQL statement without satisfactory...

Customs Authority of Yemen hacked for Protest against Government

Customs Authority of Yemen hacked for Protest against Government Today a Yemen Hacker "Alexploiter " Deface the Website of Customs Authority of Yemen, to show his Protest against Government. Hacker claim that"Well this week i hacked .gov.ye Yemens govs sites for now i am controlling the DB of the...

Design/Logic Flaw

Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2011-0845

Technical details about CVE-2011-0845 are not publicly provided in the connected documents. The record notes an unspecified vulnerability in Oracle Enterprise Manager Grid Control 10.1.0.6 with unknown vectors; monitor for updates.

CVE-2011-0845: Undefined Security Weakness

Unspecified vulnerability in the Database Control component in Oracle Enterprise Manager Grid Control 10.1.0.6 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...