Shanghai Yongxi Information Technology Co., Ltd. website building system has SQL injection vulnerability

Shanghai Yongxi Information Technology Co., Ltd. is a creative team dedicated to the fusion of technology and business, providing differentiated services and solutions that benefit our customers. Shanghai Yongxi Information Technology Co., Ltd. website builder system has a SQL injection...

SQL Injection Vulnerability in the Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niomai Network Technology Co., Ltd. station building system there is a SQL injection vulnerability attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niumai Network Technology Co., Ltd. website building system has a SQL injection vulnerability, through which an attacker can obtain sensitive information from th...

Vulnerability in Ecstore of Shanghai Shangpai Network Technology Co.

Ecstore is based on a new generation of "e-commerce solution-driven engine" ECOS development of enterprise-class open source online store system , the system is based on the PHP language and MYSQL database framework for the development of cross-platform open-source program . Ltd. Ecstore has an...

x86: Race condition in Xen mapping code

ISSUE DESCRIPTION The Xen code handling the updating of the hypervisor's own pagetables tries to use 2MiB and 1GiB superpages as much as possible to maximize TLB efficiency. Some of the operations for checking and coalescing superpages take non-negligible amount of time; to avoid potential lock...

Code Execution Vulnerability in Shanghai Shield Information Technology Co.

Fast Screen Casting for PC is a cell phone, computer and TV screen casting software developed by Shanghai Shield Information Technology Co. Ltd. Fast Cast Screen has a code execution vulnerability that can be exploited by an attacker to execute an executable program containing arbitrary code duri...

Code Execution Vulnerability in 37GameBox of Shanghai Hardtone Network Technology Co.

37GameBox is a web game box tool under Sanqi Entertainment. Ltd. 37GameBox suffers from a code execution vulnerability that can be exploited by an attacker to execute an executable program containing arbitrary code during the immediate experience after installation...

Unauthorized Access Vulnerability in the University Version of the Psychological Assessment System of Shanghai Huicheng Consulting Co.

Psychological Assessment System University Edition is a comprehensive software integrating psychological assessment, crisis warning, psychological profile and other functions, supporting both PC assessment and mobile assessment. An unauthorized access vulnerability exists in the University Editio...

DEBIAN-CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

ALPINE-CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

Design/Logic Flaw

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

x86 pv guest kernel DoS via SYSENTER

ISSUE DESCRIPTION The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege GP fault typically fatal rather than ...

SQL Injection Vulnerability in e-cology 8.0 Frontend of Shanghai Panmicro Network Technology Co.

e-cology is a collaboration platform. A SQL injection vulnerability exists in the frontend of e-cology 8.0 of Shanghai Panmicro Networks Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Shanghai Ruize Software Co., Ltd. eCRM-CRM system has information leakage vulnerability.

EK CRM Enterprise is a mobile cloud office software. Shanghai Ruize Software Co., Ltd. eCRM Enterprise Edition customer relationship management system information leakage vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in an Interface of e-office of Shanghai Panmicro Network Technology Co.

Ltd. e-office system is a set of collaborative office system. A SQL injection vulnerability exists in one of the interfaces of e-office, which can be exploited by attackers to obtain sensitive information from the database...

Binary Vulnerability in RT-AC5300 of ASUS Computer (Shanghai) Co.

ASUS Computer Shanghai Co., Ltd. business scope: research and development, manufacture of notebook computers, computer motherboards, equipment and related software, cell phone communication systems. A binary vulnerability exists in Asus Computer Shanghai Limited RT-AC5300, which can be exploited ...

Binary Vulnerability in RT-AC5300 of ASUS Computer (Shanghai) Co.

ASUS Computer Shanghai Co., Ltd. business scope: research and development, manufacture of notebook computers, computer motherboards, equipment and related software, cell phone communication systems. A binary vulnerability exists in Asus Computer Shanghai Limited RT-AC5300, which can be exploited ...

job.shanghaibang.com Cross Site Scripting vulnerability OBB-1313456

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL Injection Vulnerability in Warehouse System and Logistics Management System of Shanghai Wuchuang Information Technology Co.

Ltd. is committed to using Internet technology to promote the logistics and supply chain industry management and service innovation, and enhance the manufacturing industry to upgrade the means of service. There is a SQL injection vulnerability in the warehousing system and logistics management...