PowerCreator online teaching system /OpenPublicCourse. aspx the parameter cid sql injection vulnerability

No description provided by source...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The multiple vulnerabilities in the linux-image-2.6.26-2-powerpc64 operating system package of Debian GNU/Linux may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the linux-image-2.6.24-etchnhalf.1-sparc64 operating system Debian GNU/Linux package. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information...

SQL Injection Vulnerability in FangMail Email Backend Management System

U-Mail mail is widely used in government departments, schools, enterprises and institutions group enterprise mailbox software. A SQL injection vulnerability exists in the background management system of FangMail Mail. It allows attackers to utilize commonly used SQL injection tools to obtain...

PT-2016-5958 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.6.3 Description: The issue concerns the mishandling of the APICv on/off state in the Linux kernel, allowing guest OS users to obtain direct APIC MSR access on the host OS. This can lead to a denial of service...

Arbitrary Command Execution Vulnerability in a System of China Soft Technology

Ltd. is a product of the implementation of the pilot project of knowledge innovation by the Institute of Software of the Chinese Academy of Sciences, and is the result of the restructuring of the main body of the Institute's technological research and development. An arbitrary command execution...

SQL Injection Vulnerability in Special Equipment Inspection Management System of Fuzhou Tranda Electronics Co.(CNVD-2016-06022)

Fuzhou Tranda Electronics Co., Ltd. is a high-tech enterprise specializing in software development, system integration, security services and other computer information services. Fuzhou Chuangda Electronics Co., Ltd. special equipment inspection management system is a data information management...

Remote Command Execution Vulnerability in Office System of Nonferrous Metals Technology and Economic Research Institute (NMTRI)

Nonferrous metal technology and economic research institute office office system is a set of enterprise daily office system. The product has a remote command execution vulnerability that can be exploited by an attacker to remotely execute commands and gain server privileges...

Vulnerability of the PHP interpreter and the Mac OS X operating system, allowing attackers to execute arbitrary code

The vulnerability of the phpsnmperror function ext/snmp/snmp.c in the PHP interpreter and the Mac OS X operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

RedHat Update for spice RHSA-2016:1205-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: jq

Issue Overview: A heap-based buffer overflow flaw was found in the tokenadd function. By tricking a victim into processing a specially crafted JSON file, an attacker could use this flaw to crash jq or, potentially, execute arbitrary code on the victim's system. CVE-2015-8863 Affected Packages: jq...

Stored Cross-Site Scripting Vulnerability in 78OA Office System

78OA office system is a full-featured OA office system launched by Shenzhen Xinxingkong Software for large and medium-sized enterprises and group enterprises. 78OA office system has a stored cross-site script vulnerability, an attacker can directly insert the cross-site script, and triggered by a...

HP-UX VxFS Unauthorized Access Vulnerability

HP-UX VxFS is a set of commercial logging file software developed by Hewlett-Packard HP that runs on Unix-like operating systems. A security vulnerability exists in the ACL interface of HP-UX VxFS, which can be exploited by a local attacker to gain unauthorized access to a file...

Linux ASLR Disablement Vulnerability

Linux ASLR address space layout randomization is a set of mechanisms for controlling memory address randomization in Linux systems. A security vulnerability exists in the Linux ASLR implementation. An attacker can exploit this vulnerability by setting the RLIMITSTACK resource to 'unlimited' to...

Android system vulnerability to mention the right-vulnerability warning-the black bar safety net

A preamble 1.1 what is the root Root-that is, we here that the system provides the right, typically is for Android system mobile phone, it makes it so that the user can get the Android operating system the super-user permissions. the root is generally used to help users over the phone to...

jcms系统session重置导致getshell

简要描述： 详细说明： jcms系统session重置导致getshell 在/jcms/jcmsfiles/jcms1/web1/site/module/oss/quecode.jsp String sessionId = request.getParameter"sessionid"; 直接通过sessionid获取值 code1.setSessionNamesessionId; 然后又直接设置session 而在我们的jcms中的setup后台管理制作端中又只判断其中cookieusername是否为空 不为空即就登录 可参考如下：...

WinREST Remote Privilege Escalation

So a year back I was massively scanning internet. This case ISPs IPs blocks where you can find easily at RIPE for example. Then I found some interesting hosts where SMB were open and the ACL is totally open to root file system with the same netbios name. All file system is writable. I was able to...

StrongSoft灾害预警系统strFieldName参数SQL注入漏洞

注入链接：/Response/AjaxHandle/AjaxSingleGetReferenceFieldValue.ashx 注入参数：strFieldName 【获取数据库版本】 /Response/AjaxHandle/AjaxSingleGetReferenceFieldValue.ashx?strFieldValue=1&strSelectFieldCollection=1&tableName=sysobjects&strFieldName=convertint,@@version 【管理员账号密码】...

中科新业网络哨兵系统 /manage/include/downfile.php等两处 任意文件下载

No description provided by source...

Harbin Xinzhongxin Campus Card System Arbitrary File Upload Vulnerability

Xinzhongxin Group is a high-tech enterprise integrating independent property right development, intensive production, networked sales, professional service and system integration construction. An arbitrary file upload vulnerability exists in the Harbin Xinzhongxin Campus One Card System, which...