Johnson Controls Metasys system 代码问题漏洞

Johnson Controls Metasys system is a building automation system from Johnson Controls. A code issue vulnerability exists in the Johnson Controls Metasys system that allows an attacker to identify and spoof requests to an internal system via specially crafted requests...

Microsoft and Okta Confirm Data Breach Claims by LAPSUS$

By Deeba Ahmed Both companies have confirmed the breach after Lapsus$ hackers leaked screenshots of Oktas internal system and source code… This is a post from HackRead.com Read the original post: Microsoft and Okta Confirm Data Breach Claims by LAPSUS$...

Sifchain: Possible Database Details stored in values.yaml

The database details like username and database name are disclosed in the below mentioned file. Assuming a blank password since the password field was empty. File Location : https://github.com/Sifchain/sifnode/blob/740331dad061ee0f5a3cf3798d429f294b70f0ae/deploy/helm/block-explorer/values.yaml I...

Server Side Request Forgery (SSRF)

github.com/thecodingmachine/gotenberg is vulnerable to Server Side Request Forgery SSRF. An attacker is able to send malicious requests on behalf of the application via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as...

CVE-2021-23345

All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery SSRF via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as...

Server side request forgery (ssrf)

All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery SSRF via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as...

CVE-2021-23345 Server-side Request Forgery (SSRF)

All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery SSRF via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as...

CVE-2020-3504 Cisco UCS Manager Software Local Management CLI Denial of Service Vulnerability

A vulnerability in the local management local-mgmt CLI of Cisco UCS Manager Software could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to improper handling of CLI command parameters. An attacker could exploit th...

SQL Injection Vulnerability in Pur*** File of Ice Ordering Po

Ice point ordering treasure is a unit enterprise internal canteen ordering management software, through the cell phone APP wechat ordering, for canteen ordering consumption management. SQL injection vulnerability exists in the Pur file of Ice Point Ordering Treasure, which can be exploited by...

Microsoft Windows: System objects: Strengthen default permissions of internal system objects

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsodefaultperminternal.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for System objects: Strengthen default permissions of internal system objects Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

Cybozu Remote Service Manager fails to verify client certificates

Overview Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager fails to verify client certificates. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution...

致远某内部系统存在大量弱口令

简要描述： 详细说明： http://seeyonqd.seeyon.com/seeyon/index.jsp http://seeyonqd.seeyon.com//seeyon/getAjaxDataServlet?S=ajaxOrgManager&M=isOldPasswordCorrect&CL=true&RVT=XML&P1String=admin&P2String=wy 漏洞证明： 抓包 密码采用123456 加载字典 GET...

CVE-2013-4650

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database...

CVE-2013-4650

MongoDB versions affected are 2.4.x before 2.4.5 and 2.5.x before 2.5.1. The issue allows remote authenticated users to obtain internal system privileges by using the __system username in an arbitrary database. This is a privilege-escalation vulnerability with impact as described in the sources. ...

CVE-2013-4650

Removed by vendor...

Site for Real Estate - Brokers SQL Injection

Site for Real Estate - Brokers SQL Injection Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Site for Real Estate - Brokers SQL Injection Vulnerability Resources and...

Site to Store Automobile - Motorcycle Boat SQL Injection

Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Site to Store Automobile - Motorcycle - Boat SQL Injection Vulnerability Resources and Advantages Better cost-benefit...

Development Site Professional Liberal - Company Institutional SQL Injection

Vendor url:http://www.mformula.com.br/ Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW & AH members. Spl Greetz to:inj3ct0r.com Team Description: Development Site Professional Liberal - Company Institutional SQL Injection Vulnerability Resources and Advantages...