CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

x86 pv guest kernel DoS via SYSENTER

ISSUE DESCRIPTION The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest. This causes the guest kernel to observe a kernel-privilege GP fault typically fatal rather than ...

SQL Injection Vulnerability in e-cology 8.0 Frontend of Shanghai Panmicro Network Technology Co.

e-cology is a collaboration platform. A SQL injection vulnerability exists in the frontend of e-cology 8.0 of Shanghai Panmicro Networks Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Shanghai Ruize Software Co., Ltd. eCRM-CRM system has information leakage vulnerability.

EK CRM Enterprise is a mobile cloud office software. Shanghai Ruize Software Co., Ltd. eCRM Enterprise Edition customer relationship management system information leakage vulnerability, attackers can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in an Interface of e-office of Shanghai Panmicro Network Technology Co.

Ltd. e-office system is a set of collaborative office system. A SQL injection vulnerability exists in one of the interfaces of e-office, which can be exploited by attackers to obtain sensitive information from the database...

Binary Vulnerability in RT-AC5300 of ASUS Computer (Shanghai) Co.

ASUS Computer Shanghai Co., Ltd. business scope: research and development, manufacture of notebook computers, computer motherboards, equipment and related software, cell phone communication systems. A binary vulnerability exists in Asus Computer Shanghai Limited RT-AC5300, which can be exploited ...

Binary Vulnerability in RT-AC5300 of ASUS Computer (Shanghai) Co.

ASUS Computer Shanghai Co., Ltd. business scope: research and development, manufacture of notebook computers, computer motherboards, equipment and related software, cell phone communication systems. A binary vulnerability exists in Asus Computer Shanghai Limited RT-AC5300, which can be exploited ...

job.shanghaibang.com Cross Site Scripting vulnerability OBB-1313456

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL Injection Vulnerability in Warehouse System and Logistics Management System of Shanghai Wuchuang Information Technology Co.

Ltd. is committed to using Internet technology to promote the logistics and supply chain industry management and service innovation, and enhance the manufacturing industry to upgrade the means of service. There is a SQL injection vulnerability in the warehousing system and logistics management...

SQL injection vulnerability in the si***.php page of the website building system of Shanghai Shilian Network Technology Development Co.

Shanghai Shilian Network Technology Development Co., Ltd. is a small and medium-sized enterprises to provide website construction services as the core, and supporting the provision of related enterprise information technology application services of professional network service providers. Shangha...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Ltd. is a decoration industry enterprise management solutions software services company, independent research and development and has a number of core technologies issued by the state copyright certificate of the software technology enterprises. Ltd. home furnishing ERP management system SQL...

Shanghai ShangPai Network Technology Co., Ltd. Ecshop Has Logic Flaw Vulnerability

Commercial ECShop - new retail open source mall system, commercial B2C open source mall system, support for PC + H5 + APP + small program mall, source code free download, suitable for enterprises to quickly build a mall website, support for two open customization. And ECShop new upgrade ECShopX,...

SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. There is a SQL injection vulnerability in the Home Decoration ERP Management System of Shanghai Decoration Alliance Information Technology Co., Ltd, which can be exploited by attackers ...

Denial of Service Vulnerability in ZLAN5102-3/ZLAN5102/ZLAN5103 Common Single Serial Servers of Shanghai Zoran Information Technology Co.

Shanghai Zoran Information Technology Co., Ltd. is a high-tech enterprise providing industrial Internet of Things IoT solutions. Founded in 2008, our products include: Serial Servers, IoT Chips, Serial to Ethernet, and so on. A denial of service vulnerability exists in the...

SQL Injection Vulnerability in Bu***.htm Page of Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Ltd. is a software service company specializing in enterprise management solutions for the decoration industry. Ltd. home furnishing ERP management system Bu.htm page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in Standard PepsiCo***.ashx Page of RunShen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a high-tech company specializing in software development and information services. Ltd. SQL injection vulnerability exists in the Standard PepsiCo.ashx page, which can be exploited by attackers to obtain sensitive information from the database...

Shanghai Zhihu Information Technology Website Building System suffers from SQL Injection Vulnerability

Shanghai Zhihu Information Technology Co., Ltd. is a high-tech enterprise focusing on software customization and product development. Shanghai Zhihu Information Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information fro...

SQL injection vulnerability in Shanghai Zhihu Information Technology's website bu***_de*** system

Shanghai Zhihu Information Technology Co., Ltd. precipitated 5 years, each industry comprehensive business scenarios, combined with the ability of technological innovation, to provide social e-commerce, home furnishing industry, tourism and travel and other areas of the solution. Shanghai Zhihu...

Memory Corruption Vulnerability in DOP-B Series HMI Software at Delta Electronics Enterprise Management (Shanghai) Co.

Delta Electronics Enterprise Management Shanghai Co., Ltd. was established in December 2003, and its business scope includes the fields of computer, software, information, communication, network, electromechanics and optoelectronics. A memory corruption vulnerability exists in the DOP-B series HM...

Unauthorized Access Vulnerability in Crestron Indoor Media Controller at Shanghai Jinqiao Information Co.

Shanghai Jinqiao Information Co., Ltd. was established in August 1994, the company's business scope includes: information systems, security fire prevention engineering, computer information system integration, computer hardware and software products research and development. Shanghai Jinqiao...