Access Control Error Vulnerability in Multiple Schneider Electric Products (CNVD-2019-34799)

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. An access control error vulnerability exists in several Schneider Electric products. An attacke...

Multiple Schneider Electric Products Formatting String Error Vulnerability

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. A formatting string error vulnerability exists in several Schneider Electric products. An...

Multiple Schneider Electric Products Server-Side Request Forgery Vulnerabilities

Schneider Electric MEG6501-0001-U.motion KNX server and others are a web-based visualization system from Schneider Electric France. The system is mainly used for KNX-based home and building automation. A server-side request forgery vulnerability exists in several Schneider Electric products. An...

SQL Injection Vulnerability in Website Building System ***ts.asp of Zhongshan Cohesion Network Technology Co.

Zhongshan Cohesion Network Technology Co., Ltd. is committed to Internet branding and network marketing, specializing in areas including website construction, e-commerce, mobile Internet marketing, system platform development, and other services, and covers the basic domain name services, hosting...

SQL Injection Vulnerability in Website Building System ***ow.asp of Zhongshan Cohesion Network Technology Co.

Zhongshan Cohesion Network Technology Co., Ltd. is committed to Internet branding and network marketing, specializing in areas including website construction, e-commerce, mobile Internet marketing, system platform development, and other services, and covers the basic domain name services, hosting...

SQL Injection Vulnerability in Website Building System of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a company specializing in website construction, website optimization, system development; specializing in providing internal and external network solutions for brands and group enterprises. Suzhou Ernst Network Technology Co., Ltd. website building...

Threat landscape for smart buildings

The Kaspersky Industrial Cybersecurity Conference 2019 takes place this week in Sochi, the seventh such conference dedicated to the problems of industrial cybersecurity. Among other things, the conference will address the security of automation systems in buildings — industrial versions of the no...

SQL Injection Vulnerability in Sunwalker Web Design Company's Website Building System

Good Works Web Design is a RWD web design team that specializes in corporate identity, shopping website design and production, and other services. A SQL injection vulnerability exists in the website building system of Good Works Web Design. An attacker can exploit the vulnerability to obtain...

Real-life social engineering. Two days in tweets

This is the write-up of my live tweets while on a recent social engineering engagement. It’s all available on my feed @ghostie I did this because I wanted to share what it's like to prep for, and work through a job, warts and all. If you can take anything away, to enhance your technique, or defen...

SQL injection vulnerability in pr***.php file of website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is engaged in marketing planning, the company provides website design, graphic design, program development and Internet marketing. There is a SQL injection vulnerability in the pr.php file of the website building system of Suzhou Ernst Network Technology...

SQL injection vulnerability in pr***_sh***.php file of website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is engaged in marketing planning, the company provides website design, graphic design, program development and Internet marketing. There is a SQL injection vulnerability in the prsh.php file of the website building system of Suzhou Ernst Network Technolog...

Shandong Qiangbi Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Shandong Qiangbi Information Technology Co., Ltd. is oriented to enterprise information service-oriented Internet application service enterprises. There is a SQL injection vulnerability in the website building system of Shandong Qiangbi Information Technology Co. Attackers can use the vulnerabili...

SQL Injection Vulnerability in Website Building System of Dalian Dawn Times Technology Development Co.

Dalian Dawn Times Technology Development Co., Ltd. is an Internet company dedicated to the field of network infrastructure services. A SQL injection vulnerability exists in the website building system of Dalian Dawn Times Technology Development Co. An attacker can exploit the vulnerability to...

SQL injection vulnerability in the F***_cq*** parameter of the aj***.php page in the background of S-CMS government website builder system

S-CMS is a content management system CMS based on PHP and MySQL. There is a SQL injection vulnerability in the Fcq parameter on the aj.php page in the background of the S-CMS Government Building System, which can be exploited by an attacker to obtain sensitive information from the database...

SQL Injection Vulnerability in Lu'an Pengcheng Website Building System

Lu'an Pengcheng Network Studio, specializing in website construction, web production, web design, website customization and development. Liu'an Pengcheng network building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

[SECURITY] Fedora 30 Update: kernel-headers-5.2.11-200.fc30

Kernel-headers includes the C header files that specify the interface between the Linux kernel and userspace libraries and programs. The header files define structures and constants that are needed for building most standard programs and are also needed for rebuilding the glibc package...

SQL injection vulnerability in in***.php page of website building system of Zhejiang Soupai Information Technology Co.

Zhejiang Soupai Information Technology Co., Ltd. a company that provides users with website construction, website promotion, enterprise mailbox, mobile station, micro letter marketing and other types of Internet marketing services. Zhejiang Soupai Information Technology Co., Ltd. building system...

Shantou Sanyu Technology Co., Ltd. website building system suffers from SQL injection vulnerability.

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Code Execution Vulnerability in RGCMS

RGCMS is an open source building management system, written in PHP language, with Thinkphp 5.1 framework and MYSQL database. RGCMS code execution vulnerability, an attacker can use the vulnerability to obtain server privileges...

File Upload Vulnerability in Website Building System of Guangzhou LEAFCO Network Technology Co.

Ltd. is a website design company that provides website application system, mobile APP application system and WeChat public number for enterprise users. A file upload vulnerability exists in the website building system of Guangzhou LEAF Network Technology Co., Ltd, which can be exploited by an...