CVE-2021-37221: Unrestricted Upload of File with Dangerous Type

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file...

Sourcecodester Customer Relationship Management System 跨站脚本漏洞

Sourcecodester Customer Relationship Management System is an open source Php project by Carlo Montero, an individual developer. Used to provide an online platform for companies to manage interactions with their customers or prospects. A cross-site scripting vulnerability exists in Sourcecodester...

Incident Response: 5 Principles to Boost the Infosec/Legal Relationship

As an information-security professional, would you feel ready to respond to a state attorney in the event of a cyber-incident? Around half 47 percent of organizations polled for Kroll’s The State of Incident Response 2021 report said that their teams lack clarity around when to engage legal couns...

 ICSJWG 2021 Fall Virtual Meeting

The Industrial Control Systems Joint Working Group ICSJWG will hold the virtual 2021 ICSJWG Fall Meeting, September 21—22, 2021. ICSJWG meetings facilitate relationship building among critical infrastructure stakeholders and owners/operators of industrial control systems, idea exchange regarding...

How security can keep media and sources safe

The security community is continuously changing, growing, and learning from each other to better position the world against cyber threats. In the latest Voice of the Community blog series post, Microsoft Product Marketing Manager Natalia Godyla talks with Runa Sandvik, an expert on journalistic...

AD Starter Scan - Dangerous Trust Relationship

Binary data adsitrustunsafe.nbin...

CVE-2021-37468

NCH Reflect CRM 3.01 allows local users to discover cleartext user account information by reading the configuration files...

Oracle Siebel CRM Unauthorized Access Vulnerability

Oracle Siebel CRM is a customer relationship management solution from Oracle Corporation that includes modules for sales management, marketing management, customer service systems, call centers, etc. Siebel UI Framework is one of the framework components based on the JavaScript language. A securi...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-57445)

Oracle E-Business Suite is an extension of the original Application ERP, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on, a collection of management software, is seamlessly integrated with a management suite. Oracle Human...

Oracle E-Business Suite Unauthorized Access Vulnerability (CNVD-2021-54731)

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite. A...

Oracle E-Business Suite 输入验证错误漏洞

Oracle E-Business Suite is an extension of the original Application ERP and includes a collection of ERP Enterprise Resource Planning Management, HR Human Resource Management, CRM Customer Relationship Management and other applications that are seamlessly integrated into one management suite...

The Evolving Role of the CISO

Digital technologies have infused every aspect of a business, especially with the shutdown of the physical workplace. The increased interdependence between the physical, digital and cybersecurity worlds demand a leadership position that combines both the technical know-how and the ability to...

CVE-2021-33676

A missing authority check in SAP CRM, versions - 700, 701, 702, 712, 713, 714, could be leveraged by an attacker with high privileges to compromise confidentiality, integrity, or availability of the system...

SAP CRM 安全漏洞

SAP CRM is a customer relationship management system from SAP, a German company. A security vulnerability exists in SAP CRM ABAP, which stems from a lack of authorization checks in the product. The following products and versions are affected: SAP CRM, Versions - 700, 701, 702, 712, 713, 714...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...

07FLY-CRM Customer Relationship Management System suffers from SQL injection vulnerability (CNVD-2021-49593)

07FLY-CRM customer relationship management system is based on the GPLv3 agreement issued for small and medium-sized enterprise management activities , currently provides customer relationship manager CRM, sales and marketing inventory JXC, the software is open source and free of charge . 07FLY-CR...

Denial Of Service (DoS)

Info-ZIP is vulnerable to Denial Of Service DoS. It is possible due to a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value, because a buffer size is 10 and is supposed to be 12...

Customer Relationship Management System (CRM) 1.0 - Remote Code Execution

Exploit Title: Customer Relationship Management System CRM 1.0 - Remote Code Execution Date: 21.06.2021 Exploit Author: Ishan Saha Vendor Homepage: https://www.sourcecodester.com/php/14794/customer-relationship-management-crm-system-php-source-code.html Software Link:...

07FLY-CRM Customer Management System v1.2 suffers from SQL Injection Vulnerability

Zero take-off CRM management system 07FLY-CRM, based on the GPLv3 agreement issued for small and medium-sized management activities , currently provides customer relationship management CRM, sales and marketing inventory JXC, open source software free of charge , in order to create China's first...

CVE-2021-22181: Uncontrolled Resource Consumption

A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources...