Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-25586)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-25548)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Semrush: IDOR in semrush academy

INTRODUCTION I used two accounts to search for this vulnerability: - id: 5410425 email: ████[email protected] - id: 5407773 email: ████@anosimple.com IP used: ███ Endpoint URL: https://www.semrush.com/academy/courses/userEnroll EXPLOITATION Description of Security Issue: When a user clicks on the...

Secure Hub 10.5 : Enrollment fails with error : "Can't enroll device- WorxHome cannot enroll device because it failed to establish a secure connection with server"

Using an older Secure Hub version confirmed on 10.5, 10.6.0, enrollment fails right after enrollment URL without being able to get to authentication screen with the following: Logs will show the following: 05-03 12:12:29.406 10851 10869 D "SecureHub": "DETAIL...

Waychar enrollment system has a flawed logic vulnerability

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system has a logic flaw vulnerability that can be exploited by an attacker to bypass authentication and gain direct access to the backend management system...

SQL Injection Vulnerability in Waychar Enrollment System

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2019-43613)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

You receive an error: "No tenant identifying information found in either the request or implied by any provided credentials" when integrated with Intune and Secure Hub is in use.

When enrolling in to Citrix Endpoint Management for MDM, if the deployment is integrated with Intune for MAM, you may experience the following error and behaviour. Without Secure Hub installed using Intune MAM only, then no problems are seen. When Secure Hub is installed and enrolled for MDM with...

File Upload Vulnerability in Far Autumn Medical Training Enrollment System v1.0

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

SQL Injection Vulnerability in the Frontend of Far Autumn Medical Training Enrollment System v1.0

Far Autumn Medical Online Examination System adopts the universal test bank management software, applicable to all levels and types of medical schools and hospitals, the content contains the three basic exams for medical and nursing personnel, title exams, licensing exams, academic exams, trainin...

Design/Logic Flaw

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password...

CVE-2019-11576

Gitea before 1.8.0 allows 1FA for user accounts that have completed 2FA enrollment. If a user's credentials are known, then an attacker could send them to the API without requiring the 2FA one-time password...

Hyperledger: Enrolling to a CA that returns an empty response crashes the node process

If a CA server responds with an empty response during enrollment, an exception is thrown in the event emitter on end. This is an uncaughtException and causes the containing node process to exit. To replicate: With the attached files, run: npm install node badCa.js & node index.js This starts a...

Endpoint Management 10.9.0.12 - Profile installation failed, MDM Payroll error

Unable to enroll DEP devices, failing while the 2nd profile installation with an error: "the new mdm payload doesn't match the old payload"...

Man-in-the-Middle (MitM)

ipa is vulnerable to man-in-the-middle attack. There is no secure way to provide the ipa server's Certificate Authority CA certificate to a client during join, which limited the client's ability to authenticate and verify the server. This allows an attacker to perform a man-in-the-middle attack...

iOS devices failing to enrol via NetScaler after upgrade to 11.1 60.13

After upgrading NetScaler to 11.1 60.13, iOS devices are no longer able to enroll However, Android devices are not affected. iPhone X can enroll but can't access the Store iPhone 7 can't enroll at all Checking the logs, we would be able to see the below, when iOS attempts to enroll: "AAA Client...

SUSE SLES15 Security Update : ovmf (SUSE-SU-2018:4155-1)

This update for ovmf fixes the following issues : Security issues fixed : CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. CVE-2017-5732: Fixed privilege...

First Time Set up - MAM enrollment is failing in Citrix Endpoint Management

This scenario is for new cloud set up where new MAM enrollment is failing and user will get "Access to company network is denied". While browsing NSG URL and after providing credential if you do not get "HTTP Status 404 - Not Found" page but instead we get "Secure Connection Failed" error message...

Security update for ovmf (moderate)

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. - CVE-2017-5732: Fixed...

SUSE-SU-2018:4155-1 Security update for ovmf

This update for ovmf fixes the following issues: Security issues fixed: - CVE-2018-3613: Fixed AuthVariable Timestamp zeroing issue on APPENDWRITE bsc1115916. - CVE-2017-5731: Fixed privilege escalation via processing of malformed files in TianoCompress.c bsc1115917. - CVE-2017-5732: Fixed...