Arbitrary Password Reset Vulnerability in Website Building System of Guangdong Desheng Technology Co.

Ltd. is a leading domestic integrated service provider for people's livelihood, providing information system construction and related operation services in the fields of human resources and social security, employment, finance, healthcare and big data, etc. It actively promotes the operation...

openSUSE Security Update : libvirt (openSUSE-2020-1778)

This update for libvirt fixes the following issues : - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. - qemu: Adjust max memlock on mdev hotplug bsc1177480. - Xen: Don't add do...

SQL Injection Vulnerability in Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niumai Network Technology Co., Ltd. website building system has a SQL injection vulnerability, through which an attacker can obtain sensitive information from th...

S-CMS School Building System suffers from SQL Injection Vulnerability

S-CMS School Building System is a content management system for school websites. A SQL injection vulnerability exists in S-CMS School Building System. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in si***.php Page of Qingdao Shangzhixin Network Technology Co.

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

SQL Injection Vulnerability in Beijing Leader Shengshi Network Technology Development Center's Website Building System

Founded in 2007, Beijing Leader Shengshi Network Technology Development Center is a professional network company that provides a full range of corporate digital services, APP WeChat development and operation, website construction and network marketing services. There is a SQL injection...

Stored Cross-site Scripting Vulnerability in Dahan Software Portal Building System

Dahan Software is a professional developer of Internet software applications. A stored cross-site scripting vulnerability exists in the Dahan Software portal building system. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

HackBrowserData - Decrypt Passwords/Cookies/History/Bookmarks From The Browser

hack-browser-data is an open-source tool that could help you decrypt data passwords / bookmarks / cookies / history from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux. Supported Browser Windows Browser | Password | Cookie | Bookmark | Histor...

Yunnan Tianren Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yunnan Tianren Network Technology Co., Ltd. is a set of network promotion, overall planning, domain name registration, website construction, e-commerce as one of the professional network services company, is the world's largest Chinese search engine - Baidu's general agent in Yunnan Province, but...

Changchun North-South Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Changchun North-South Technology Co., Ltd. is the first professional IT service operator in Jilin Province to provide a full range of Internet services for enterprises and institutions. Changchun North-South Technology Co., Ltd. station building system there are SQL injection vulnerabilities,...

File Inclusion Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

Timewarrior - Commandline Time Reporting

Timewarrior is a time tracking utility that offers simple stopwatch features as well as sophisticated calendar-based backfill, along with flexible reporting. It is a portable, well supported and very active Open Source project. Installing From Package Thanks to the community, there are binary...

SQL Injection Vulnerability in the Website Building System of Beijing Dongyunchuangda Technology Co. Ltd (CNVD-2020-58347)

Beijing Dongyunchuangda Technology Co., Ltd. is a domestic Internet application service provider. There is a SQL injection vulnerability in the website building system of Beijing Dongyunchuangda Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the...

Industrial Cyberattacks Get Rarer but More Complex

Cyberattacks against the oil and gas industry inched up only slightly compared to the second half of 2019. Security experts say they are encouraged by the anemic growth, but at the same time are expressing concern that attacks are now becoming more potent, targeted and complex. According to new...

SQL Injection Vulnerability in Website Building System of Guangdong Jundu Technology Co.

Guangdong Jundu Technology Co., Ltd. is a comprehensive Internet value marketing services information technology network company specializing in custom development, network marketing, new media marketing, media advertising and other value-added services as a whole. There is a SQL injection...

SUSE-SU-2020:2647-1 Security update for for SUSE Manager 4.1

This update for SUSE Manager 4.1 fixes the following issues: google-gson: - Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages. httpcomponents-client: - Use packages from SUSE:SLE-15-SP2:Update:Products:Manager41:Update to fix building other packages...

[SECURITY] Fedora 32 Update: dotnet-build-reference-packages-0-5.20200608git1b1a695.fc32

This contains references packages used for building .NET Core. This is not meant to be used by end-users...

Arbitrary file read vulnerability in S-CMS backend (CNVD-2020-57394)

S-CMS Government Station Building System, S-CMS School Station Building System, S-CMS News Portal System and S-CMS Enterprise Station Building System are developed by Zibo Shining Network Technology Co., Ltd. which is specialized in providing solutions for government station building.S-CMS Hospit...

Jinan Yuxia Information Technology Co., Ltd. website building system SQL injection vulnerability

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

File Upload Vulnerability in daozicms V1.4

Daozicms Enterprise Building System is a cms enterprise building system developed by Thinkphp6.0.2+layui-v2.3.0+Mysql5.7. A file upload vulnerability exists in daozicms V1.4, which can be exploited by attackers to gain server administrative privileges...