CVE-2021-35337

SourceCodester Phone Shop Sales Management System 1.0 is vulnerable to Insecure Direct Object Reference (IDOR). The root cause is improper access control that lets an attacker change the id parameter to view invoices of other users. Reported across multiple sources (NVD entry CVE-2021-35337; CNVD...

Sourcecodester Phone Shop Sales Managements System 安全漏洞

SourceCodester Phone Shop Sales Managements System is a PHP project by SourceCodester, Inc. to manage phone store sales transactions. A security vulnerability exists in Sourcecodester Phone Shop Sales Managements System, which stems from the fact that Sourcecodester Phone Shop Sales Managements...

SQL Injection Vulnerability in GNSS Web Server of Guangzhou Nanfang Satellite Navigation Instrument Co.

Guangzhou Nanfang Satellite Navigation Instrument Co., Ltd Nanfang Satellite Navigation, belonging to Nanfang Surveying and Mapping Group, is a high-tech industrial company dedicated to the research and development, production and sales of global positioning and navigation satellite GNSS...

WordPress NativeChurch Theme File Disclosure

File disclosure vulnerability in WordPress NativeChurch theme Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Weak password vulnerability in WTScada configuration software of Changzhou Wenting Software Co.

Changzhou Wenting Software Co., Ltd. is a company whose business scope includes: software development; software sales; computer system integration and so on. Changzhou Wenting Software Co., Ltd WTScada configuration software has a weak password vulnerability that can be exploited by attackers to...

Weak password vulnerability in WTScada configuration software

Changzhou Wenting Software Co., Ltd. was established on August 20, 2014, and the company's business scope includes: software development; software sales; computer system integration, etc. WTScada configuration software has a weak password vulnerability, attackers use the weak password to log in t...

Arbitrary File Download Vulnerability in Intelligent Desktop Management System of Changsha Tongxun Computer Technology Co.

Changsha Tongxun Computer Technology Co., Ltd. is a company specializing in software development, sales and maintenance. An arbitrary file download vulnerability exists in the Intelligent Desktop Management System of Changsha Tongxun Computer Technology Co. An attacker can exploit the vulnerabili...

Unauthorized Access Vulnerability in Panasonic Corporation (China) WV-SC384

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SC384, which can be exploited b...

Unauthorized Access Vulnerability in Network Camera WV-SW458 at Panasonic (China) Co.

Panasonic China Co., Ltd. is a manufacturer primarily responsible for carrying out sales and after-sales service activities for home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Network CameraWV-SW458 of Panasonic China Co. which ca...

SQL Injection Vulnerability in 07FLY-CRM

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...

07FLY-CRM suffers from SQL injection vulnerability (CNVD-2021-46255)

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM SQL injection vulnerability , an attacker can use this vulnerability to obtain sensitive information in the databa...

07FLY-CRM has a flawed logic vulnerability

07FLY-CRM is a domestic open source general-purpose customer management system for various industries , mainly for small and medium-sized sales / after-sales service team . 07FLY-CRM has a logic flaw vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Wireless Signal Extender of Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Wireless Signal Extender has an unauthorized access vulnerability that can be exploited b...

Amazon Prime Day: Big Sales, Big Scams

For many people, major online shopping events such as the annual Amazon Prime day — which falls on June 21 this year — presents a unique opportunity to purchase goods at heavily discounted prices. However, shoppers are not the only ones looking to benefit — cybercriminals are also looking to prey...

Arbitrary File Download Vulnerability in Blue Shield Firewall of Blue Shield Information Security Technology Co.

Blue Shield Information Security Technology Co., Ltd. is the earliest professional network security enterprise engaged in the research and development, production and sales of information security products with independent intellectual property rights in China. Blue Shield Information Security...

Unauthorized Access Vulnerability in WV-SPW611L at Panasonic (China) Co.

Panasonic China Co., Ltd. was established in 1994 and is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPW611L, which can be...

Unauthorized Access Vulnerability in WV-SPW532L at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPW532L, which can...

Unauthorized Access Vulnerability in WV-SW355 at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in WV-SW355 of Panasonic China Co. An attack...

The vulnerability of the Template component in the Oracle Sales Offline remote management tool allows a attacker to trigger a service failure.

The vulnerability of the Template component in the Oracle Sales Offline remote management tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using the HTTP protocol...

The vulnerability of the Template component in the Oracle Sales Offline remote management tool allows a attacker to trigger a service failure.

The vulnerability of the Template component in the Oracle Sales Offline remote management tool is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to trigger a service failure using the HTTP protocol...