Yxcms Logic Flaw Vulnerability

Yxcms building system compatible cell phone is a website creation system. A security vulnerability exists in the protected\apps\member\controller\shopcarController.php file in version 1.4.7 of the Yxcms building system compatible cell phone. The vulnerability can be exploited by an attacker to...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

Design/Logic Flaw

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

protected\apps\member\controller\shopcarController.php in Yxcms building system compatible cell phone v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture...

CVE-2018-8761

CVE-2018-8761 : In Yxcms building system (compatible cell phone) v1.4.7, a logic flaw in the file protected\apps\member\controller\shopcarController.php allows an attacker to modify a price before form submission by observing data in a packet capture. The vulnerability is described in multiple so...

Python Scriptable Reverse Engineering Sandbox: PyREBox

PyREBox is a Python scriptable Reverse Engineering sandbox. It is based on QEMU, and its goal is to aid reverse engineering by providing dynamic analysis and debugging capabilities from a different perspective. PyREBox allows to inspect a running QEMU VM, modify its memory or registers, and to...

SQL injection vulnerability in news_detail.php page of website building system of Zhuhai Shuangyang Network Technology Co.

Zhuhai Shuangyang Network Technology Co., Ltd. is engaged in website construction, system development, network marketing and other services. Zhuhai Shuangyang Network Technology Co., Ltd. building system newsdetail.php page SQL injection vulnerability, attackers can use the vulnerability to obtai...

SQL Injection Vulnerability in Taicang Suyi Information Technology Co.

Taicang Suyi Information Technology Co., Ltd. is a technology-oriented enterprise integrating website construction, software development, mobile application development, interface design and system integration. There is a SQL injection vulnerability in the website building system of Taicang Suyi...

SQL Injection Vulnerability in Website Building System of Shenzhen Sanliwu Technology Co.

Shenzhen Three Six Five Technology Co., Ltd. is an Internet application technology and professional network communication service provider. Shenzhen Three Six Five Technology Co., Ltd. website construction system has a SQL injection vulnerability, allowing attackers to exploit the vulnerability t...

SQL Injection Vulnerability in Website Building System of SHENYI TECHNOLOGY GROUP LIMITED

SHENYI TECHNOLOGY GROUP LIMITED is a comprehensive service-oriented enterprise pioneering website construction and network application services, mobile APP development, big data mining, cloud computing, Internet of Things, smart home, intellectual property agency, investment and financing service...

The role that regions can and should play in critical infrastructure protection

Todays report, Critical Infrastructure Protection in Latin America and the Caribbean 2018, developed in partnership between Microsoft and the Organization of American States OAS, demonstrates the value of regional cooperation in global efforts to increase the security of the online environment...

RLE Wi-MGR/FDS-Wi Web Server Cross-Site Scripting Vulnerability

RLE Wi-MGR/FDS-Wi is a wireless monitoring device. web server is a web server used in it. A cross-site scripting vulnerability exists in the web server of the RLE Wi-MGR/FDS-Wi version 6.2. A remote attacker can exploit this vulnerability to inject malicious JavaScript code via the device's BACne...

repairs.mfjbuilding.mfjenterprises.com XSS vulnerability

Open Bug Bounty ID: OBB-568976 Description| Value ---|--- Affected Website:| repairs.mfjbuilding.mfjenterprises.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

buildingcentre.co.uk Open Redirect vulnerability

Open Bug Bounty ID: OBB-562609 Description| Value ---|--- Affected Website:| buildingcentre.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

SQL Injection Vulnerability in Zhuhai Meitian Web Design Co.

Zhuhai Meitian Web Design Co., Ltd. is a manufacturer and supplier dedicated to web production and website promotion. Zhuhai Meitian Web Design Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to obtain sensitive information from the...

SQL Injection Vulnerability in Yefan's Website Building System

Ye Fan network is set APP development, H5 development, website development, micro letter development and enterprise brand publicity in one of the one-stop service enterprise is the Internet comprehensive service provider. SQL injection vulnerability exists in Ye Fan Network website building syste...

IGF proves the value of bottom-up, multi-stakeholder model in cyberspace policy-making

In December, the Internet Governance Forum IGF brought the world together to talk about the internet. I tend to take a definite interest in cybersecurity, but there were many more important topics discussed. They ranged from diversity in the technology sector through to philosophy in the digital...

IGF proves the value of bottom-up, multi-stakeholder model in cyberspace policy-making

In December, the Internet Governance Forum IGF brought the world together to talk about the internet. I tend to take a definite interest in cybersecurity, but there were many more important topics discussed. They ranged from diversity in the technology sector through to philosophy in the digital...