SUSE SLES12 Security Update : kernel (Live Patch 36 for SLE 12 SP3) (SUSE-SU-2021:1865-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1865-1 advisory. This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed: - Fix a kernel warni...

HashiCorp Vault 和 Vault Enterprise 代码问题漏洞

Hashicorp HashiCorp Vault is a private key access management tool from HashiCorp Hashicorp USA. A security vulnerability exists in HashiCorp Vault and Vault Enterprise that allows updates to expiring token leases and dynamic secret leases specifically those within 1 second of the maximum TTL, whi...

PT-2021-19974 · Hashicorp · Hashicorp Vault +1

Name of the Vulnerable Software and Affected Versions: HashiCorp Vault and Vault Enterprise versions prior to 1.5.9 HashiCorp Vault and Vault Enterprise versions prior to 1.6.5 HashiCorp Vault and Vault Enterprise versions prior to 1.7.2 Description: The issue allowed the renewal of nearly-expire...

Weak Password Vulnerability in Huazhou Private Cloud-CDN Live Streaming Acceleration Server

Shenzhen Huashimida Information Technology Co., Ltd. is a smart hotel IT service provider. A weak password vulnerability exists in the Huashi Private Cloud-CDN live streaming acceleration server, which can be exploited by attackers to obtain sensitive information...

GetPaid < 2.3.4 - Authenticated Stored XSS

In the plugin, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41721)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41723)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit the...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41720)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41722)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers ...

SQL Injection Vulnerability in Ricochet Cloud's WeChat Live Code Management System

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the RikCloud WeChat Live Code Management System. An attacker can exploit this vulnerability to...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40237)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40236)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

Asus Zenfone Live (L1) phone has information leakage vulnerability

Asus Zenfone Live L1 is a smartphone launched by Asus in 2018. The Asus Zenfone Live L1 phone suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Vsmart Live suffers from an information disclosure vulnerability

Vsmart Live is a smartphone. Vsmart Live suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

Student Management System 1.0 - (message) Persistent Cross-Site Scripting Vulnerability

Exploit Title: Student Management System 1.0 - 'message' Persistent Cross-Site Scripting Authenticated Exploit Author: mohsen khashei kh4sh3i or email protected Vendor Homepage: https://github.com/amirhamza05/Student-Management-System Software Link:...

Student Management System 1.0 Cross Site Scripting

Exploit Title: Student Management System 1.0 - 'message' Persistent Cross-Site Scripting Authenticated Date: 2021-05-13 Exploit Author: mohsen khashei kh4sh3i or [email protected] Vendor Homepage: https://github.com/amirhamza05/Student-Management-System Software Link:...

Student Management System 1.0 - 'message' Persistent Cross-Site Scripting (Authenticated)

Exploit Title: Student Management System 1.0 - 'message' Persistent Cross-Site Scripting Authenticated Date: 2021-05-13 Exploit Author: mohsen khashei kh4sh3i or [email protected] Vendor Homepage: https://github.com/amirhamza05/Student-Management-System Software Link:...

[SECURITY] Fedora 33 Update: redis-6.0.13-1.fc33

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

TeaBot Trojan Targets Banks via Hijacked Android Handsets

Researchers have discovered an Android trojan that can steal victims’ SMS messages and credentials and completely take over devices. The trojan, dubbed TeaBot, is aimed at committing fraud against at least 60 banks in Europe. Join Threatpost for “Fortifying Your Business Against Ransomware, DDoS ...