Schneider Electric EcoStruxure Building Operation WebStation 跨站脚本漏洞

The EcoStruxure Building Operation WebStation is a web-based user interface for daily operations in the EcoStruxure BMS. A cross-site scripting vulnerability exists in EcoStruxure Building Operation WebStation 2.0 - 3.1. An attacker can exploit this vulnerability to inject HTML and JavaScript cod...

Schneider Electric EcoStruxure Building Operation WebReports 安全漏洞

EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. An improper access control vulnerability exists in EcoStruxure Building Operation WebReports 1.9 - 3.1. A remote attacker could exploit this vulnerability to access restricted web resources...

Schneider Electric EcoStruxure Building Operation WebReports 代码问题漏洞

EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. An improperly restricted XML external entity reference vulnerability exists in EcoStruxure Building Operation WebReports 1.9 - 3.1. The vulnerability stems from a misconfiguration of the XML...

Schneider Electric EcoStruxure Building Operation WebReports 跨站脚本漏洞

Schneider Electric EcoStruxure Building Operation WebReports is a web application for creating, viewing and managing reports. A cross-site scripting vulnerability exists in Schneider Electric EcoStruxure Building Operation WebReports 1.9 - 3.1. The vulnerability stems from improper validation of...

SQL Injection Vulnerability in Website Building System of Nantong Dot Cool Network Technology Co.

Nantong Dot Cool Network Technology Co., Ltd. is a company that provides perfect industry website construction solutions for group enterprises and listed companies. There is a SQL injection vulnerability in the website building system of Nantong Dot Cool Network Technology Co., Ltd, which can be...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2020-68883)

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the website building system of Inner Mongolia Hohai Trading Co. Attackers can use the vulnerability ...

Unauthorized Access Vulnerability in the Website Building System of Beijing Jinfang Times Technology Co.

Beijing Jinfang Times Technology Co., Ltd. is a company that provides website construction services for enterprises, institutions and government agencies. An unauthorized access vulnerability exists in the website building system of Beijing Jinfang Times Technology Co. An attacker can exploit the...

SQL Injection Vulnerability in Website Building System of Liaoning Huarui Technology Co.

Huarui Technology is a high-tech IT company committed to the field of Internet application services, in line with the "beyond innovation, long-term service, the pursuit of excellence, excellence" business philosophy, based in Liaoning, radiation, according to the needs of enterprise information...

SQL Injection Vulnerability in Website Building System of Chiton Group Co.

hereinafter referred to as "Chitong Group" was formerly known as Guizhou Chitong Network Technology Co. As an Internet business ecological service provider, Chitong Group focuses on the use of marketing service data in various industries, takes data activation as the basis of operation, and...

NFCGate - An NFC Research Toolkit Application For Android

NFCGate is an Android application meant to capture, analyze, or modify NFC traffic. It can be used as a researching tool to reverse engineer protocols or assess the security of protocols against traffic modifications. Notice This application was developed for security research purposes by student...

PT-2020-5824 · Schneider Electric · Ecostruxure Building Operation Webreports

Name of the Vulnerable Software and Affected Versions: EcoStruxure Building Operation WebReports versions 1.9 through 3.1 Description: A CWE-284 Improper Access Control issue exists that could allow a remote attacker to access restricted web resources due to improper access control, potentially...

File Upload Vulnerability in Website Building System of Wuhan Jinglun Technology Development Co.

Wuhan Jinglun Technology Development Co., Ltd. is a company that mainly deals with software development, system integration, digital media marketing and other projects. A file upload vulnerability exists in the website building system of Wuhan Jinglun Technology Development Co. An attacker can us...

openSUSE Security Update : salt (openSUSE-2020-1868)

This update for salt fixes the following issues : - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 - Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

openSUSE: Security Advisory for salt (openSUSE-SU-2020:1868-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Unauthorized access vulnerability in the background lo***.asp page of the website building system of Yunnan Tianren Network Technology Co.

Yunnan Tianren Network Technology Co., Ltd. is a set of network promotion, overall planning, domain name registration, website construction, e-commerce as one of the professional network services company, is the world's largest Chinese search engine - Baidu's general agent in Yunnan Province, but...

SUSE-SU-2020:3244-1 Security update for Salt

This update fixes the following issues: salt: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 - Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

openSUSE Security Update : salt (openSUSE-2020-1833)

This update for salt fixes the following issues : - Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 - Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 - Ensure...

Arbitrary Password Reset Vulnerability in Website Building System of Guangdong Desheng Technology Co.

Ltd. is a leading domestic integrated service provider for people's livelihood, providing information system construction and related operation services in the fields of human resources and social security, employment, finance, healthcare and big data, etc. It actively promotes the operation...

openSUSE Security Update : libvirt (openSUSE-2020-1778)

This update for libvirt fixes the following issues : - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. - qemu: Adjust max memlock on mdev hotplug bsc1177480. - Xen: Don't add do...

SQL Injection Vulnerability in Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niumai Network Technology Co., Ltd. website building system has a SQL injection vulnerability, through which an attacker can obtain sensitive information from th...