Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Gitlab

It is an offensive tool for vulnerability research and education. The primary CVE ID is not explicitly mentioned, but the repository contains various vulnerable environments based on Docker-Compose, including ones for CVE-2016-9086, CVE-2017-1000353, and CVE-2018-1000006. The target product/servi...

fars.irib.ir Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1136129 Security Researcher L34RN3R Helped patch 74 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting fars.irib.ir website and its users. Following coordinate...

Arbitrary File Read Vulnerability in iCMS

iCMS is a content management system built with PHP and MySQL. iCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to read any file on the server and disclose sensitive information...

Synergy Systems & Solutions HUSKY RTU 6049-E70 Information Disclosure Vulnerability

Synergy Systems & Solutions HUSKY RTU 6049-E70 is a Remote Terminal Unit RTU from Synergy Systems & Solutions, India. The Synergy Systems & Solutions HUSKY RTU 6049-E70 suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...

Shijiazhuang Compass Network Technology Co., Ltd. website building system SQL injection vulnerability

Shijiazhuang Compass Network Technology Co., Ltd. is an Internet application service provider. Shijiazhuang Compass Networks Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-19000

For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP headers have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information...

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...

XSS Vulnerability in eyoucms Version V1.4.4

eyoucms is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source CMS. eyoucmsV1.4.4 version of the XSS vulnerability , attackers can use the vulnerability to obtain sensitive information on the site...

SQL Injection Vulnerability in DSO2O

DSO2O is an O2O takeaway system launched by Changsha Deshaun Network Technology Co. DSO2O suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Shenzhen Point Search Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shenzhen Point Search Technology Co., Ltd. is an Internet + lawyers + private customized service providers, specializing in providing lawyers with domain name registration, website construction, optimization and promotion, website hosting and maintenance, media release, full network marketing and...

CVE-2020-10508 Sunnet eHRD - Sensitive Data Exposure

Sunnet eHRD, a human training and development management system, improperly stores system files. Attackers can use a specific URL and capture confidential information...

CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure

UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...

CVE-2020-3921 Unisoon UltraLog Express - Sensitive Data Exposure

UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page...

SQL Injection Vulnerability in PHPSHE

PHPSHE mall system is a combination of product display, online shopping, order management, payment management, article management, customer consultation feedback and other functions, providing users with online shopping mall construction program. PHPSHE has a SQL injection vulnerability, which ca...

Web exhibition PHP foreign trade enterprise website red style has SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

CVE-2020-4309

IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force ID: 177080...

SQL Injection Vulnerability in joyplus-cms ad***_vo***_to***.php File

joyplus-cms joy video is an open source video backend management system based on PHP and MySQL. The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . joyplus-cms advoto.php file contains a SQL...

CVE-2019-4719

IBM MQ and IBM MQ Appliance 7.1, 7.5, 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqras data...

SQL Injection Vulnerability in Xinhou Collaboration Office System (CNVD-2020-23543)

Xinhuo Co-operation Office System is an open source and cross-platform office system. There is a SQL injection vulnerability in Xinhao Collaboration Office System, which can be exploited by attackers to obtain sensitive information from the database...

SQL injection vulnerability in us***.php file of Jinwei Mobile Mall system

Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...