WMS SQL注入漏洞

WMS is a warehouse management software. A SQL injection vulnerability exists in WMS version 1.0, which can be exploited by remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software (CNVD-2021-55195)

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...

Tianjin Shenzhou Haotian Technology Co., Ltd. online self-service accounting system has logic flaws vulnerability

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. Tianjin Shenzhou Haotian Technology Co., Ltd. online self-service reporting system has a logic flaw vulnerability, attackers can use the vulnerability to...

Kaseya VSA 代码注入漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. Kaseya VSA is vulnerable to a code injection vulnerability, no details of the vulnerability are provided at this time...

The Unfixed Flaw at the Heart of REvil’s Ransomware Spree

Security researchers warned Kaseya about its IT management software in April, but the patches didn't come fast enough to avert last week's disaster...

MDT AutoSave 操作系统操作系统命令注入漏洞

MDT AutoSave is a software application. It provides an automated change management function. An operating system command injection vulnerability exists in MDT AutoSave, which stems from the application's API not validating data data effectively, allowing an attacker to execute system commands by...

File Upload Vulnerability in Collaborative Office Platform of Microsoft Technology (Hangzhou) Co.

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. A file upload vulnerability exists in the Collaboration Office platform of Microhome Software Technology Hangzhou Co., Ltd, whi...

Command execution vulnerability in Zhiyuan OA (CNVD-2021-51370)

Zhiyuan OA is a collaborative management software, a digital collaborative operation platform for medium-sized and large group organizations. A command execution vulnerability exists in Zhiyuan OA, which can be exploited by an attacker to execute arbitrary commands...

Directory Traversal Vulnerability in Yulin Golden Point Cloud Software Technology Co.

Yulin Golden Point Cloud Software Technology Co., Ltd, business scope: artificial intelligence application software development; network and information security software development; software sales; information security equipment sales; network equipment sales; electronic product sales and so on...

Unauthorized Access Vulnerability in Lexmark CX517de

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in the Lexmark CX517de, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in Lexmark B2338dw

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in Lexmark B2338dw, which can be exploited by attackers to obtain sensitive informati...

SQL Injection Vulnerability in Guangzhou Tutron interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

Unauthorized Access Vulnerability in Lexmark MB2236adw

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in the Lexmark MB2236adw, which can be exploited by attackers to obtain sensitive...

Logic Vulnerabilities in the New Business Warfare Sandbox System of Xindao Technology Co.

New Way Technology Co., Ltd. is an enterprise management software and enterprise Internet service provider. A logic vulnerability exists in the Xindao New Business Warfare Sandbox system of Xindao Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in IP Camera of Zhejiang Dahua Technology Co.

IP Camera is a network camera management software. A weak password vulnerability exists in IP Camera of Zhejiang Dahua Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Zero Degrees of Space at Jiangyin Leader Information Technology Co.

Jiangyin Leader Information Technology Co., Ltd. was founded in 2006 by visiting scholars from the University of Copenhagen, Denmark, is a high-tech enterprise specializing in the development of application management software and Internet application technology development. Jiangyin City Leader...

Unspecified Vulnerability in Red Hat 3scale

Red Hat 3scale is a suite of API Application Programming Interface lifecycle management software from Red Hat. A security vulnerability exists in 3scale that stems from the fact that the development portal login form does not validate CSRF tokens, and therefore does not protect against login CSRF...

HPESBUX04166 rev.2 - HPE HP-UX System Management Homepage, Multiple Remote Vulnerabilities

Potential Security Impact: Local: Authentication Bypass; Remote: Arbitrary Code Execution, Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX System Management Software A.3.2.21.03 or earlier HPE System Management Homepage A.3.2.21.03 or earlier CVSS Scores: | CV...

XSS Vulnerability in Impression Notes Windows Client

Impression Notes is an excellent electronic notes data management software. An XSS vulnerability exists in the Impression Notes Windows client, which can be exploited by an attacker to obtain user cookie information...

Weak password vulnerability in gateway management software of Hangzhou Sanhui Information Engineering Co.

Hangzhou Sanhui Information Engineering Co., Ltd. is specializing in the field of computer communications integration CTI, focusing on the production and development of voice products and applications in various industries, is the earliest in the country engaged in the development of voice...