Zibo Shining Network Technology Co., Ltd. shipped 100 virtual goods automatic delivery system there are SQL injection vulnerabilities

Shipping 100 Virtual Goods Autoship System is a powerful virtual goods autoship system/article pay to read system. Zibo Shining Network Technology Co., Ltd. shipping 100 virtual goods automatic delivery system SQL injection vulnerability, an attacker can use the vulnerability to obtain database...

Cangzhou Jialan Network Technology Co., Ltd. unauthorized access vulnerability in the virtual goods automatic delivery system

JiaBlue virtual goods automatic delivery system is the latest one-stop self-service delivery platform launched by JiaBlue Technology, which supports automatic delivery of virtual goods, paid article reading, paid audio and video, paid gallery and so on. The whole process does not require human...

CVE-2020-12048: Cleartext Transmission of Sensitive Information

Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption e.g., TLS/SSL when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker wi...

PT-2020-13014

Name of the Vulnerable Software and Affected Versions Phoenix Hemodialysis Delivery System SW versions 3.36 through 3.40 Description The issue concerns the lack of data-in-transit encryption, such as TLS/SSL, when transmitting sensitive treatment and prescription data between the Phoenix system a...

Switching from a “Just in Time” delivery system should include planning ahead

As it becomes clear that some things will never again be the same after the global coronavirus pandemic, it is time to prepare for the future. The cybersecurity implications of upcoming changes will be most noticeable in organizations that rely on security models like the software defined...

CVE-2015-6364

Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960...

Design/Logic Flaw

Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960...

CVE-2015-6364

Cisco Videoscape Distribution Suite Service Manager REST API Information Disclosure (CVE-2015-6364) affects Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager. The root cause is improper validation of HTTP requests to the REST API, allowing an unau...

CVE-2015-6364

Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960...

CVE-2015-6364: Exposure of Sensitive Information to an Unauthorized Actor

Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager allows remote attackers to obtain sensitive information via crafted URLs in REST API requests, aka Bug ID CSCuv86960...

PT-2015-7205

Name of the Vulnerable Software and Affected Versions Cisco Content Delivery System Manager Software version 3.2 Description The issue allows remote attackers to obtain sensitive information via crafted URLs in REST API requests. Recommendations For Cisco Content Delivery System Manager Software...

Remote Command Execution Vulnerability in LotAPP Application Delivery System of Beijing Huaxia Innovation Technology Co.

Ltd. is a company that applies the delivery of independent intellectual property rights. LotAPP is one of the company's applications. A remote command execution vulnerability exists in the LotAPP application delivery system of Beijing Huaxia Innovation Technology Co. An attacker could exploit the...

GE Healthcare Centricity PACS-IW Built-in Account Vulnerability

GE Healthcare Centricity PACS-IW is an image archiving and delivery system for the healthcare industry. Built-in accounts exist for GE Healthcare Centricity PACS-IW, with 'shared' passwords for shared users; and 'scan' passwords for scan users, allowing remote attackers to to utilize these accoun...

Cisco Videoscape Delivery System DoS

It's possible to reload device with HTTP request...

Cisco Headend Digital Broadband Delivery System Cross-Site Request Forgery Vulnerability

Cisco Headend Digital Broadband Delivery System is a digital broadband delivery system from Cisco USA. The system provides content protection, video-on-demand and dbd backup and recovery. A cross-site request forgery vulnerability exists in the Cisco Headend Digital Broadband Delivery System. A...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-0759

Cisco Headend Digital Broadband Delivery System is affected by a CSRF vulnerability (CVE-2015-0759) where an unauthenticated attacker could cause actions in a user’s browser by tricking them into visiting a malicious link. Root cause: insufficient input validation on web requests. Impact: remote ...

CVE-2015-0759: Improper Input Validation

Cross-site request forgery CSRF vulnerability in Cisco Headend Digital Broadband Delivery System allows remote attackers to hijack the authentication of arbitrary users...

PT-2015-4866

Name of the Vulnerable Software and Affected Versions Cisco Headend Digital Broadband Delivery System affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users. This can be achieved by exploiting the...

Crlf injection

CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks or cross-site scripting XSS attacks, via a crafted request, aka Bug ID...