PT-2018-14667

Name of the Vulnerable Software and Affected Versions School Equipment Monitoring System version 1.0 Description The issue allows SQL injection via the login screen, related to include/user.vb. Recommendations For School Equipment Monitoring System version 1.0, consider restricting access to the...

PT-2018-14662

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System version 1.0 Description The issue concerns a CSRF vulnerability. It affects the "event/controller.php" endpoint, specifically when the "action" parameter is set to "photos". Recommendations For School...

Siemens SIMATIC IT LMS, SIMATIC IT Production Suite and SIMATIC IT UA Discrete Manufacturing License Issue Vulnerabilities

Siemens SIMATIC IT LMS, SIMATIC IT Production Suite, and SIMATIC IT UA Discrete Manufacturing are products of Siemens, Germany.Siemens SIMATIC IT LMS is a line monitoring system for overall equipment effectiveness OEE. Siemens SIMATIC IT LMS is a line monitoring system for Overall Equipment...

CVE-2018-18799: Cross-Site Request Forgery (CSRF)

School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos...

CVE-2018-18806: Improper Neutralization of Special Elements used in an SQL Command

School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...

PT-2018-14661

Name of the Vulnerable Software and Affected Versions School Attendance Monitoring System version 1.0 Description The issue is related to a CSRF vulnerability. It affects the "/user/user/edit.php" API endpoint. Recommendations For School Attendance Monitoring System version 1.0, consider...

CVE-2018-18797: Cross-Site Request Forgery (CSRF)

School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php...

CVE-2018-15711

Nagios XI 5.5.6 allows remote authenticated attackers to reset and regenerate the API key of more privileged users. The attacker can then use the new API key to execute API calls at elevated privileges...

School Attendance Monitoring System 1.0 - Cross-Site Request Forgery (Update Admin)

Exploit Title: School Attendance Monitoring System 1.0 - Cross-Site Request Forgery Update Admin Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

School Equipment Monitoring System 1.0 - 'login' SQL Injection

Exploit Title: School Equipment Monitoring System 1.0 - 'login' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/sems0.zip Version: 1...

School Equipment Monitoring System 1.0 SQL Injection

Exploit Title: School Equipment Monitoring System 1.0 - 'login' SQL Injection Dork: N/A Date: 2018-10-29 Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link: https://www.sourcecodester.com/sites/default/files/download/janobe/sems0.zip Version: 1...

School Equipment Monitoring System 1.0 - login SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: School Equipment Monitoring System 1.0 - 'login' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://www.sourcecodester.com/users/janobe Software Link:...

SQL Injection Vulnerability in Frontend of GPS Intelligent Monitoring Management System of Henan Starcom

Henan Starcom Information Technology Co., Ltd. is a specialized company engaged in GPS global positioning operation services. SQL injection vulnerability exists in the front-end of the GPS Intelligent Monitoring Management System of Henan Xingtong, which can be exploited by attackers to obtain...

Arbitrary File Upload Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Coal mine remote monitoring integrated management system is a comprehensive monitoring and management system that remotely monitors all the sensing data of coal mine underground in real time through the Internet and summarizes, analyzes and alarms them in time. Sichuan Institute of Safety Science...

Vulnerabilities in the Integrated Management System for Coal Mine Remote Monitoring of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

SQL Injection Vulnerability in Integrated Coal Mine Remote Monitoring Management System of Sichuan Institute of Safety Science and Technology

Sichuan Coal Mine Remote Integrated Monitoring System is a comprehensive monitoring and management system that can realize remote real-time monitoring of various sensing data in coal mines through the Internet and summarize, analyze and alarm them in time. It monitors the ventilation and gas...

Optimizing A Monitoring System: Three Methods for Effective Incident Management

Picture this: You’ve just returned from a well-deserved vacation and, upon opening up your security monitoring system you’re faced with the prospect of analyzing thousands of events. This isn’t an imaginary scenario, the security monitoring world actually monitoring in general is full of anomalie...

Philips Alice 6 Improper Authentication Vulnerability

The Philips Alice 6 is a polysomnographic monitoring system PSG designed to record, display and print physiologic information for clinicians/physicians. The Philips Alice 6 suffers from an improper authentication vulnerability that could be exploited by an attacker to obtain sensitive information...

Growatt Monitoring System Android App Multiple Override Access Vulnerabilities

Growatt Monitoring System Android APP is a client application that provides PV monitoring services. Growatt Monitoring System Android APP has overstepped access vulnerabilities in multiple places. Attackers can obtain sensitive information, including: power plant equipment information, name, powe...

CVE-2017-10933

All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows remote attackers to read arbitrary files on the system via a full path name after host address...