Qualcomm Bugs Open 40 Percent of Android Handsets to Attack

Six serious bugs in Qualcomm’s Snapdragon mobile chipset impact up to 40 percent of Android phones in use, according research released at the DEF CON Safe Mode security conference Friday. The flaws open up handsets made by Google, Samsung, LG, Xiaomi and OnePlus to DoS and escalation-of-privilege...

SQL Injection Vulnerability in Go*** File of NiuShop Multi-Merchant Mall System of Shanghai Niuzhiyun Network Technology Co.

Niushop Multi-Merchant Mall System is a B2B2C mall system with Uniapp applet and Thinkphp6. Shanghai NiuZhiyun Network Technology Co., Ltd NiuShop Multi-commercial Mall System Go file there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in...

SQL Injection Vulnerability in Anshan Guangwu Network Technology Co.

Anshan Guangwu Network Technology Co., Ltd. mainly provides website production and hosting maintenance, domain name registration services and network marketing and promotion programs. Anshan Guangwu Network Technology Co., Ltd. website building system SQL injection vulnerability, attackers can us...

SQL Injection Vulnerability in Hefei Blue Collar Business Co.

Hefei Blue Collar Business Information Co., Ltd. SEO team, founded in 2008, since its inception has been studying the combination of website Baidu optimization, Internet marketing, website construction. To provide enterprises with a full range of information technology application program. Hefei...

ZZCMS suffers from SQL injection vulnerability

ZZCMS is a content management system for Merchants Network. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in Ar***.asp page of website building system of Wuxi Yi Shang Technology Co.

Wuxi Yi Shang Technology Co., Ltd. is a network planning and marketing enterprise. Ltd. building system Ar.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in the Website Building System of Guangdong Kisite E-commerce Technology Co.

Ltd. is a B2B e-commerce website. There is a SQL injection vulnerability in the website system of Guangdong Kisitech E-commerce Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-2500: Improper Access Control

This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can access the sensitive data on QNAP Kayako server with API keys. We have replaced the API key to mitigate the vulnerability, and already fixed the issue in Helpdesk 3.0.1 and...

PT-2020-18575

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric FA Engineering Software versions 1.94Y and earlier CW Configurator versions 1.010L and earlier EM Software Development Kit EM Configurator versions 1.010L and earlier GT Designer3 GOT2000 versions 1.221F and earlier GX...

CVE-2020-12041: Incorrect Permission Assignment for Critical Resource

The Baxter Spectrum WBM v17, v20D29, v20D30, v20D31, and v22D24 telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the WBM, and allows the WBM to be rebooted. Temporary configuration changes to netwo...

PT-2020-13008

Name of the Vulnerable Software and Affected Versions Baxter Spectrum WBM versions v17, v20D29, v20D30, v20D31, and v22D24 Description The telnet Command-Line Interface of the Baxter Spectrum WBM grants access to sensitive data stored on the WBM. It permits temporary configuration changes to...

SQL Injection Vulnerability in Schoolfree Psychological Assessment System (CNVD-2020-41310)

The School Worry-Free Psychological Assessment System is a platform for online mental health testing and diagnosis via the Internet. A SQL injection vulnerability exists in the School Worry Free Psychological Assessment System. An attacker can exploit the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Human Resource Management System of Dongguan Zhiyue Software Technology Co.

Dongguan Zhiyue Software Technology Co., Ltd. is an enterprise informatization platform focusing on EHR+ERP+OA three systems in one, and is a supplier integrating R&D, production, sales and service. There is a SQL injection vulnerability in the human resource management system of Dongguan Zhiyue...

OMERO.web Information Disclosure Vulnerability

OMERO.web is a client program from the Open Microscopy Environment team for viewing images on the OMERO server from a web browser. A security vulnerability exists in OMERO.web versions prior to 5.6.3, which arises when the program passes sensitive data elements, such as a session key, as URL quer...

SQL Injection Vulnerability in Website Building System of Chifeng E-top Network Limited (CNVD-2020-41757)

Ltd. is mainly engaged in website construction, website promotion, website planning, software development, network promotion, network integrated marketing and other businesses. There is a SQL injection vulnerability in the website building system of Chifeng E-top Network Co., Ltd, which can be...

SQL Injection Vulnerability in PHPCMS of Coolmouse (Beijing) Culture Media Co.

PHPCMS is a self-developed framework using the OOP object-oriented approach. There is a SQL injection vulnerability in PHPCMS of CoolSkate Beijing Culture Media Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Chifeng E-top Network Limited (CNVD-2020-41335)

Chifeng ETO Network Co., Ltd. is a service company mainly engaged in website construction and website promotion. There is a SQL injection vulnerability in the website building system of Chifeng E-top Network Co., Ltd, which can be exploited by attackers to obtain sensitive information in the...

ShopsN open source mall system de** SQL injection vulnerabilities exist

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system de there is a SQL injection...

Google Android System Out-of-Bounds Read Vulnerability (CNVD-2020-32928)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by attackers to obtain sensitive information...

Google Android System Information Disclosure Vulnerability (CNVD-2020-31523)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An information disclosure vulnerability exists in the System component of Google Android 10. An attacker can exploit the vulnerability to obtain sensitive informati...