PT-2020-5824 · Schneider Electric · Ecostruxure Building Operation Webreports

Name of the Vulnerable Software and Affected Versions: EcoStruxure Building Operation WebReports versions 1.9 through 3.1 Description: A CWE-284 Improper Access Control issue exists that could allow a remote attacker to access restricted web resources due to improper access control, potentially...

File Upload Vulnerability in Website Building System of Wuhan Jinglun Technology Development Co.

Wuhan Jinglun Technology Development Co., Ltd. is a company that mainly deals with software development, system integration, digital media marketing and other projects. A file upload vulnerability exists in the website building system of Wuhan Jinglun Technology Development Co. An attacker can us...

openSUSE Security Update : salt (openSUSE-2020-1868)

This update for salt fixes the following issues : - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 - Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

openSUSE: Security Advisory for salt (openSUSE-SU-2020:1868-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Unauthorized access vulnerability in the background lo***.asp page of the website building system of Yunnan Tianren Network Technology Co.

Yunnan Tianren Network Technology Co., Ltd. is a set of network promotion, overall planning, domain name registration, website construction, e-commerce as one of the professional network services company, is the world's largest Chinese search engine - Baidu's general agent in Yunnan Province, but...

SUSE-SU-2020:3244-1 Security update for Salt

This update fixes the following issues: salt: - Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 - Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

openSUSE Security Update : salt (openSUSE-2020-1833)

This update for salt fixes the following issues : - Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 - Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 - Ensure...

Arbitrary Password Reset Vulnerability in Website Building System of Guangdong Desheng Technology Co.

Ltd. is a leading domestic integrated service provider for people's livelihood, providing information system construction and related operation services in the fields of human resources and social security, employment, finance, healthcare and big data, etc. It actively promotes the operation...

openSUSE Security Update : libvirt (openSUSE-2020-1778)

This update for libvirt fixes the following issues : - CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. - CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. - qemu: Adjust max memlock on mdev hotplug bsc1177480. - Xen: Don't add do...

SQL Injection Vulnerability in Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niumai Network Technology Co., Ltd. website building system has a SQL injection vulnerability, through which an attacker can obtain sensitive information from th...

S-CMS School Building System suffers from SQL Injection Vulnerability

S-CMS School Building System is a content management system for school websites. A SQL injection vulnerability exists in S-CMS School Building System. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in si***.php Page of Qingdao Shangzhixin Network Technology Co.

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

SQL Injection Vulnerability in Beijing Leader Shengshi Network Technology Development Center's Website Building System

Founded in 2007, Beijing Leader Shengshi Network Technology Development Center is a professional network company that provides a full range of corporate digital services, APP WeChat development and operation, website construction and network marketing services. There is a SQL injection...

Stored Cross-site Scripting Vulnerability in Dahan Software Portal Building System

Dahan Software is a professional developer of Internet software applications. A stored cross-site scripting vulnerability exists in the Dahan Software portal building system. An attacker can exploit the vulnerability to obtain sensitive information such as user cookies...

HackBrowserData - Decrypt Passwords/Cookies/History/Bookmarks From The Browser

hack-browser-data is an open-source tool that could help you decrypt data passwords / bookmarks / cookies / history from the browser. It supports the most popular browsers on the market and runs on Windows, macOS and Linux. Supported Browser Windows Browser | Password | Cookie | Bookmark | Histor...

Yunnan Tianren Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yunnan Tianren Network Technology Co., Ltd. is a set of network promotion, overall planning, domain name registration, website construction, e-commerce as one of the professional network services company, is the world's largest Chinese search engine - Baidu's general agent in Yunnan Province, but...

Changchun North-South Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Changchun North-South Technology Co., Ltd. is the first professional IT service operator in Jilin Province to provide a full range of Internet services for enterprises and institutions. Changchun North-South Technology Co., Ltd. station building system there are SQL injection vulnerabilities,...

File Inclusion Vulnerability in MetInfo Enterprise Website Builder System

MetInfo Enterprise Building System is a free and open source enterprise CMS. A file inclusion vulnerability exists in MetInfo version v5.0.4, which can be exploited by attackers to gain control of the server...

Timewarrior - Commandline Time Reporting

Timewarrior is a time tracking utility that offers simple stopwatch features as well as sophisticated calendar-based backfill, along with flexible reporting. It is a portable, well supported and very active Open Source project. Installing From Package Thanks to the community, there are binary...

SQL Injection Vulnerability in the Website Building System of Beijing Dongyunchuangda Technology Co. Ltd (CNVD-2020-58347)

Beijing Dongyunchuangda Technology Co., Ltd. is a domestic Internet application service provider. There is a SQL injection vulnerability in the website building system of Beijing Dongyunchuangda Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the...