Vulnerabilities fixed in Samsung products

Vulnerabilities have been fixed in several Samsung products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to sensitive data...

U.S. Dept Of Defense: Administration Authentication Bypass on https://█████

Hi there I found a way to connect to an administration space on your website https://██████████ how to reproduce ? 1 - go to this link : https://███/██████████ 2 - create a html file with : html 3 - launch the file, click on the button and return to the page https://███████/█████ 4 - refresh the...

Vulnerabilities fixed in GitLab

Several vulnerabilities have been fixed in GitLab Community Edition CE and Enterprise Edition EE. The vulnerabilities allow a remote unauthenticated malicious person potentially able to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF Cross-Site...

Vulnerabilities fixed in Atlassian Jira

Atlassian has fixed several vulnerabilities in Jira. The vulnerabilities potentially enable a remote malicious person to able to launch attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Circumvention of security measure Accessing sensitive data Accessing...

Vulnerabilities fixed in Cisco products

Vulnerabilities have been fixed in Cisco products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Remote code execution Administrator/Root rights Access to sensiti...

SQL Injection Vulnerability in Ke361 Backend Mo***.cl***.php

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...

Information leakage vulnerability in H5S CONSOLE of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co. was founded on 09/25/2018. Legal representative Xue Shuimu, the company's business scope includes: engaged in computer technology, network technology, electromechanical technology, electronic technology, information technology, digital technology, communication...

SQL Injection Vulnerability in Ke361 (CNVD-2021-24525)

Ke361 is an open source Taobao system. Ke361 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive database data...

S-CMS News Portal System Backend SQL Injection Vulnerability

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. There is a SQL injection vulnerability in the background of S-CMS News Portal System. Attackers can use the vulnerability to obtain sensitive informati...

SQL Injection Vulnerability in Joomla DigiCom Component ge*** Functions

Joomla is a globally recognized content management system, with 6% of the world's website market share. Joomla! is a software system developed using the PHP language with a MySQL database.DigiCom is a third-party component of Joomla. Joomla DigiCom component ge function SQL injection vulnerabilit...

SQL Injection Vulnerability in Enterprise Torch China's Website Building System (CNVD-2021-22995)

Founded in 2005, Enterprise Torch China is an early technology innovation company providing Internet application services for enterprise informationization construction. A SQL injection vulnerability exists in Enterprise Torch China's website builder system, which can be exploited by attackers to...

Logic flaw vulnerability in the backend of the Ruyi Management System

Ruoyi management system is based on SpringBoot2.0 permissions management system, the core technology using SpringBoot, MyBatis, Shiro, Thymeleaf, Bootstrap, Vue and so on. If the backend of the management system has a logic flaw vulnerability. Attackers can use the vulnerability to overstep the...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22937)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

PT-2021-2251 · Cisco · Cisco Network Services Orchestrator

Name of the Vulnerable Software and Affected Versions: Cisco Network Services Orchestrator NSO affected versions not specified Description: A vulnerability in the API subsystem and web-management interface of Cisco Network Services Orchestrator NSO could allow an unauthenticated, remote attacker ...

Vulnerabilities fixed in Google Chrome

Vulnerabilities have been fixed in Google Chrome. The vulnerabilities allow a malicious person to launch attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data As usual, Google...

UFIDA U8-OA l***.jsp suffers from SQL injection vulnerability.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA l.jsp, which can be exploited by an attacker to obtain sensitive information from the database...

Vulnerabilities fixed in the Ubuntu kernel

Vulnerabilities have been fixed in the Ubuntu kernel. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Circumvention of security measure Remote code execution User rights...

MKCMS official version suffers from SQL injection vulnerability (CNVD-2021-16407)

MKCMS is a free and open source PHP web content management system developed by Yakun Technology. MKCMS official version of the existence of SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

PostgreSQL Information Disclosure Vulnerability (CNVD-2021-14796)

PostgreSQL is a free object-relational database server database management system distributed under a flexible BSD-style license. An information disclosure vulnerability exists in PostgreSQL. An attacker could exploit the vulnerability could bypass access restrictions to data via privileges to...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Kaiqi Technology Co.

Nei Meng Kai Enterprise Technology Co., Ltd. is committed to serving local head brand customers as well as medium and small enterprises, providing professional one-stop Internet marketing solutions for enterprises. There is a SQL injection vulnerability in the website building system of Inner...