614 matches found
CVE-2020-29666
The CVE-2020-29666 issue affects Lan ATMService M3 ATM Monitoring System 6.1.0. A directory-listing vulnerability in the web interface allows a remote attacker to read log files under /websocket/logs/ that contain a user cookie and the predefined developer cookie value. The underlying root cause ...
CVE-2020-29667: Insufficient Session Expiration
In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient Session Expiration...
CVE-2020-29666: Undefined Security Weakness
In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and the predefined developer's cookie value...
Lan ATMService M3 ATM 安全漏洞
Lan ATMService M3 ATM Monitoring System is a software for monitoring ATM machines from the Russian company Lan ATMService. A directory traversal vulnerability exists in Lan ATMService M3 ATM Monitoring System 6.1.0. An attacker can use this vulnerability to view log files in /websocket/logs/ that...
PT-2020-17241
Name of the Vulnerable Software and Affected Versions Lan ATMService M3 ATM Monitoring System version 6.1.0 Description The issue allows a remote attacker to gain control over the system due to insufficient session expiration. This can be achieved by using a default cookie value, such as...
PT-2020-17240
Name of the Vulnerable Software and Affected Versions Lan ATMService M3 ATM Monitoring System version 6.1.0 Description A directory-listing issue allows a remote attacker to view log files located in /websocket/logs/, which contain a user's cookie values and the predefined developer's cookie valu...
Lan ATMService M3 ATM Code Issue Vulnerability
Lan ATMService M3 ATM Monitoring System is a software that can be used to monitor ATM machines from the Russian company Lan ATMService. A security vulnerability exists in Lan ATMService M3 ATM 6.1.0, which can be exploited by an attacker to gain control over system sessions that do not expire...
Stored Cross-site Scripting Vulnerability in Pollution Source Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.
Beijing Wanwei Yingchuang Technology Development Co., Ltd. is committed to the research, development and application of products and technologies in the field of environmental protection Internet of Things. A stored cross-site scripting vulnerability exists in the online pollution source monitori...
Anhui Huanmei Intelligent Technology Co., Ltd. pollution source online monitoring system has SQL injection vulnerability
Anhui Huanmei Intelligent Technology Co., Ltd. was founded in May 2007, and its business scope includes computer hardware and software, network products, communication products, communication products and so on. Anhui Huanmei Intelligent Technology Co., Ltd. has a SQL injection vulnerability in i...
SQL Injection Vulnerability in PV Power Plant Monitoring System of Jiangsu Goodway Power Technology Co.
Jiangsu Goodway Power Supply Technology Co., Ltd. is a new energy high-tech enterprise. A SQL injection vulnerability exists in the monitoring system of the photovoltaic power plant of Jiangsu Goodway Power Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information fr...
Debian: Security Advisory (DLA-2311-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2311-1 : zabbix security update
It was discovered that there was a potential cross-site scripting vulnerability via iframe HTML elements in Zabbix, a PHP-based monitoring system. For Debian 9 'Stretch', this problem has been fixed in version 1:3.0.7+dfsg-3+deb9u1. We recommend that you upgrade your zabbix packages. For the...
SQL Injection Vulnerability in Thermal Network Monitoring System of Qingdao He Sheng Si Zhuang Measurement and Control Technology Co.
Qingdao HeShengShiZhuang Measurement and Control Technology Co., Ltd. is a company specializing in the development of thermal energy metering and monitoring systems, flow meters, pressure instruments and regulating instruments. Ltd. has a SQL injection vulnerability in its thermal network...
SQL Injection Vulnerability in Pollution Source Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.
Beijing Wanwei Yingchuang Technology Development Co., Ltd. was founded in 2004, the company to "Internet + environmental protection" as the main line. There is a SQL injection vulnerability in the online monitoring system of Beijing Wanwei Yingchuang Technology Development Co., Ltd. that can be...
Command Execution Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.
AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co. Ltd. suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...
File upload vulnerability in flash flood monitoring and early warning system
Chengdu Wanjiang Gangli Technology Co., Ltd. is a professional manufacturer and supplier of electronic product development, computer software product development and water conservancy informatization system design. A file upload vulnerability exists in the flash flood monitoring and early warning...
Directory Traversal Vulnerability in Online Monitoring System of Beijing Wanwei Yingchuang Technology Development Co.
Beijing Wanwei Yingchuang Technology Development Co., Ltd. is a professional environmental protection Internet of Things products and solutions provider. Beijing Wanwei Yingchuang Technology Development Co., Ltd. pollution source online monitoring system there is a directory traversal...
Oh, what a boot-iful mornin’
In mid-April, our threat monitoring systems detected malicious files being distributed under the name "on the new initiative of the World Bank in connection with the coronavirus pandemic" in Russian with the extension EXE or RAR. Inside the files was the well-known Rovnix bootkit. There is nothin...
Mikrotik Router Monitoring System 1.2.3 - (community) SQL Injection Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Mikrotik Router Monitoring System 1.2.3 - 'community' SQL Injection Exploit Author: jul10l1r4 Julio Lira Vendor Homepage: https://mikrotik.com Software Link: https://mikrotik.com/download Version: = 1.2.3 Tested on: Debian ...
