[SECURITY] Fedora 34 Update: libgcrypt-1.9.3-3.fc34

Libgcrypt is a general purpose crypto library based on the code used in GNU Privacy Guard. This is a development version...

File Upload Vulnerability in Beijing Bolehoo Technology Co.

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. A file upload vulnerability exists in the website building system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to gain contr...

S3-Account-Search - S3 Account Search

This tool lets you find the account id an S3 bucket belongs too. For this to work you need to have at least one of these permissions: Permission to download a known file from the bucket s3:getObject. Permission to list the contents of the bucket s3:ListBucket. Additionally, you will need a role...

RLSA-2021:2591 Moderate: edk2 security update

EDK Embedded Development Kit is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fixes: edk2: possible heap corruption with LzmaUefiDecompressGetInfo CVE-2021-28211 For more details about the security issues,...

Arbitrary File Read Vulnerability in WORMCMS of Shanghai Yanfeng Information Technology Co.

WORMCMS is open source and free PHP enterprise website development and construction management system. Shanghai Yanfeng Information Technology Co. WORMCMS has an arbitrary file reading vulnerability, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in WORMCMS of Shanghai Yanfeng Information Technology Co.

WORMCMS is open source and free PHP enterprise website development and construction management system. Shanghai Yanfeng Information Technology Co. WORMCMS file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...

XSS Vulnerability in Disk Enterprise LCMS

Pan Enterprise LCMS is a lightweight PHP development framework . LCMS has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

SUSE: Security Advisory (SUSE-SU-2021:2180-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Benefits of CI/CD for Your Software Development Company

By Waqas The benefits of CI/CD are numerous and allow companies to deliver software and updates faster and more reliably. This is a post from HackRead.com Read the original post: Benefits of CI/CD for Your Software Development Company...

GHSA-8VFW-V2JV-9HWC Reflected cross-site scripting in development mode handler in Vaadin

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0.8 allows local user to execute arbitrary JavaScript code by opening crafted URL in browser. -...

Reflected cross-site scripting in development mode handler in Vaadin

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0.8 allows local user to execute arbitrary JavaScript code by opening crafted URL in browser. -...

SQL Injection Vulnerability in GNSS Web Server of Guangzhou Nanfang Satellite Navigation Instrument Co.

Guangzhou Nanfang Satellite Navigation Instrument Co., Ltd Nanfang Satellite Navigation, belonging to Nanfang Surveying and Mapping Group, is a high-tech industrial company dedicated to the research and development, production and sales of global positioning and navigation satellite GNSS...

Command Execution Vulnerability in Man City CMS

Man City CMS program is a set of CI framework for the development of the core, in the PHP + MYSQL environment running under the perfect and powerful rapid station-building system. A command execution vulnerability exists in ManCity CMS, which can be exploited by attackers to cause command executi...

Unauthorized Access Vulnerability in Online Fingerprint Time and Attendance System of Beijing Zhongcheng Technology Development Co.

Ltd. is a company in the field of time safety management, venture capital, green agriculture, mining extraction and OEM production. An unauthorized access vulnerability exists in the online fingerprint time and attendance system of Beijing Zhongguancun Technology Development Co. Ltd, which can be...

Weak password vulnerability in WTScada configuration software of Changzhou Wenting Software Co.

Changzhou Wenting Software Co., Ltd. is a company whose business scope includes: software development; software sales; computer system integration and so on. Changzhou Wenting Software Co., Ltd WTScada configuration software has a weak password vulnerability that can be exploited by attackers to...

SUSE: Security Advisory (SUSE-SU-2021:2163-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Weak password vulnerability in WTScada configuration software

Changzhou Wenting Software Co., Ltd. was established on August 20, 2014, and the company's business scope includes: software development; software sales; computer system integration, etc. WTScada configuration software has a weak password vulnerability, attackers use the weak password to log in t...

Encouraging women to embrace their cybersecurity superpowers

The cybersecurity challenges of today require a diversity of skills, perspectives, and experiences, yet women remain underrepresented in this field. On International Women’s Day, some Microsoft Security women leaders penned a powerful blog highlighting the underrepresentation of women in...

5UCMS suffers from SQL injection vulnerability (CNVD-2021-46910)

5UCMS is a PHP development, THINKPHP as the core, based on HMVC rules to develop suitable for small and medium-sized enterprises, companies, news, individuals, and other related industries of the web content management system. 5UCMS has a SQL injection vulnerability , attackers can use the...

CVE-2021-33604 Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0.8 allows local user to execute arbitrary JavaScript code by opening crafted URL in browser...