[SECURITY] Fedora 33 Update: flatpak-1.10.0-1.fc33

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...

SQL Injection Vulnerability in Website Building System of Hangzhou Lebang Technology Company Limited (CNVD-2021-05505)

Hangzhou Lebang Technology Co., Ltd. provides Internet solutions for corporate brands. A SQL injection vulnerability exists in the website building system of Hangzhou Lebang Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from the database...

File Upload Vulnerability in Website Building System of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. station building system there is a file...

SQL Injection Vulnerability in Website Building System of Guangzhou Netsky Network Technology Co.

Guangzhou net day network technology limited company long-term service in the Internet information technology high-tech position, is committed to engaging in various industries in the enterprise company's e-commerce, website construction and website promotion, corporate publicity, software...

SQL Injection Vulnerability in the Website Building System of Spiegel Fargo Network Security Information Technology Company Limited (CNVD-2021-01311)

Spiegel Fargo Network Security Information Technology Co., Ltd. was established on 11/09/2007. Legal representative Xu Binglian, the company's scope of business includes: computer network technology development, promotion; network security technology services and consulting. There is a SQL...

Henan Qingfeng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Henan Qingfeng Network Technology Co., Ltd. is a high-tech company mainly operating in network services, engaged in website production, network marketing planning, software development, talent information services and other businesses. Henan Qingfeng Network Technology Co., Ltd. website building...

Yunnan Huaji Youxiang Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-00622)

The business scope of Yunnan Huaji Youxiang Network Technology Co., Ltd. includes: the development of computer software and hardware and technical consulting, technology transfer, technical services; computer graphic design; web page design, etc.. Yunnan Huaji Youxiang Network Technology Co., Ltd...

HcCms has a logic flaw

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCms has a logic vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in the Website Building System of Beijing SUNNETWISE TECHNOLOGY CO.

Ltd. specializes in website construction, website design, small and medium-sized enterprise management software development. There is a SQL injection vulnerability in the website building system of Beijing Sunwealth Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in the Frontend of Enterprise Website Building System of Zibo Shining Network Technology Co. Ltd (CNVD-2020-73484)

Zibo Shining Network Technology Co., Ltd. enterprise station building system is a specialized solution for enterprise station building products. There is a SQL injection vulnerability in the frontend of Zibo Shining Network Technology Co. Ltd enterprise website building system, which can be...

SQL Injection Vulnerability in the Website Building System of Beijing Leader Shengshi Network Technology Development Center (CNVD-2020-73459)

Founded in 2007, Beijing Leader Shengshi Network Technology Development Center is a professional network company that provides a full range of corporate digital services, APP WeChat development and operation, website construction and network marketing services. There is a SQL injection...

Authentication Failure

This is a weird story of a building owner commissioning an artist to paint a mural on the side of his building -- except that he wasnt actually the buildings owner. The fake landlord met Hawkins in person the day after Thanksgiving, supplying the paint and half the promised fee. They met again a...

Directory Traversal Vulnerability in Website Building System of Shanghai Niomai Network Technology Co.

Ltd. is a software company focusing on serving small and medium-sized courier and logistics enterprises. With a deep understanding of the current situation and development direction of the management and service of Chinese and foreign courier and logistics enterprises, the company has created a...

SQL Injection Vulnerability in the Backend of Website Building System of Shanghai Niomai Network Technology Co.

Ltd. is a software company focusing on serving small and medium-sized courier and logistics enterprises. With a deep understanding of the current situation and development direction of the management and service of Chinese and foreign courier and logistics enterprises, the company has created a...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3155-1)

This update for salt fixes the following issues : Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 Ensure...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3243-1)

This update for salt fixes the following issues : Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3039-1)

This update for libvirt fixes the following issues : CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. qemu: Adjust max memlock on mdev hotplug bsc1177480. Xen: Don't add dom0 twice...

SQL Injection Vulnerability in the Website Building System of Shanghai Dicky Collar Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the website building system of Shanghai BeltLeader, which can be exploited by attackers to obtain sensitive...

File Upload Vulnerability in Website Building System of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading travel industry chain service provider with high market share in China. There is a file upload vulnerability in the website building system of Beijing Zhongcheng Kexin Technology Development Co., Ltd, which can be exploited by...

SQL Injection Vulnerability in Tianjin Billy Technology Development Co.

Tianjin Billy Science and Technology Development Co., Ltd. is a modern high-tech company with sales of instrumentation products, engineering design and management consulting as a whole. There is a SQL injection vulnerability in the website building system of Tianjin Billy Science and Technology...