CVE-2021-44600

The CVE-2021-44600 entry concerns Simple Online Mens Salon Management System (MSMS) 1.0, where the password parameter is vulnerable to SQL injection. Connected sources (PT-2021-24139) provide concrete details: the vulnerability resides in the password parameter and can allow an attacker to retrie...

Unspecified Vulnerability in Parallels Remote Application Server

Parallels Remote Application Server RAS is an application delivery and VDI Virtual Desktop Infrastructure solution from Parallels, Inc. A security vulnerability exists in Parallels Remote Application Server RAS that originated from a vulnerability that allows a local attacker to retrieve certain...

About the security content of watchOS 8.3

About the security content of watchOS 8.3 This document describes the security content of watchOS 8.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Someone Is Running Lots of Tor Relays

Since 2017, someone is running about a thousand -- 10% of the total -- Tor servers in an attempt to deanonymize the network: Grouping these servers under the KAX17 umbrella, Nusenu says this threat actor has constantly added servers with no contact details to the Tor network in industrial...

Apple tvOS buffer overflow vulnerability (CNVD-2021-99878)

Apple tvOS is a set of smart TV operating systems from the American company Apple Apple. A buffer overflow vulnerability exists in several Apple products, and an attacker may be able to disclose user information through a maliciously crafted file...

Simple Online Men's Salon Management System 1.0 SQL Injection

MSMS Vendor Description The password parameter on MSMS 1.0 appears to be vulnerable to SQL injection attacks. The predictive tests of this application interacted with that domain, indicating that the injected SQL query was executed. The attacker can retrieve all authentication and information abo...

A version of finger is running that exposes valid user information to any entity on the network.

...

Sql injection

The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections...

Rapid7 Nexpose Information Disclosure Vulnerability

Rapid7 Nexpose is a set of vulnerability management software from Rapid7, Inc. that can use scan results to deeply probe a network. The software supports scanning configuration environments for errors, vulnerabilities, malware, etc. Rapid7 Nexpose has an information disclosure vulnerability that...

MTN Group: Wordpress users disclosure from json and xml file

Summary: It's possible to get information about the users registered such as: username without authentication in Wordpress via API on: https://www.mtn.co.sz/wp-json/oembed/1.0/embed?url=https://www.mtn.co.sz/&format=json https://www.mtn.co.sz/author-sitemap.xml Steps To Reproduce: The path...

CVE-2021-43182

In JetBrains Hub before 2021.1.13415, a DoS via user information is possible...

CVE-2021-43182

In JetBrains Hub before 2021.1.13415, a DoS via user information is possible...

Design/Logic Flaw

In JetBrains Hub before 2021.1.13415, a DoS via user information is possible...

CVE-2021-43182

In JetBrains Hub before 2021.1.13415, a DoS via user information is possible...

CVE-2021-43182

CVE-2021-43182 affects JetBrains Hub prior to version 2021.1.13415, where a denial-of-service condition can be triggered by processing user information. Related sources (Red Hat, CNVD, NVD mirrors) describe the issue consistently as a DoS vulnerability in Hub. The NVD entry lists a CVSS v3.1 base...

CVE-2021-43182

In JetBrains Hub before 2021.1.13415, a DoS via user information is possible...

Robinhood Trading App Suffers Data Breach Exposing 7 Million Users' Information

Robinhood on Monday disclosed a security breach affecting approximately 7 million customers, roughly a third of its user base, that resulted in unauthorized access of personal information by an unidentified threat actor. The commission-free stock trading and investing platform said the incident...

SAP Business Technology Platform信息泄露漏洞

SAP Business Technology Platform is a business technology platform from SAP Germany that integrates intelligent enterprise applications with database and data management, analytics, integration and extension capabilities into a single platform for cloud and hybrid environments, including hundreds...

CVE-2021-41251

@sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform abstractions. This affects applications on SAP Business Technology Platform that use the SAP Cloud SDK and enabled caching of destinations. In affected versions and in some...

CVE-2021-41251

@sap-cloud-sdk/core contains the core functionality of the SAP Cloud SDK as well as the SAP Business Technology Platform abstractions. This affects applications on SAP Business Technology Platform that use the SAP Cloud SDK and enabled caching of destinations. In affected versions and in some...