[SECURITY] Fedora 34 Update: flatpak-1.10.2-1.fc34

flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information...

SQL Injection Vulnerability in Website Building System of Nantong XED Software Co. Ltd (CNVD-2021-22607)

Nantong XED Software Co., Ltd. is a professional company engaged in website production, Internet marketing, SEO optimization. Nantong XED Software Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the...

Unauthorized Access Vulnerability in the Website Building System of Suqian Lechuang Information Technology Co.

Suqian Lechon Information Technology Co., Ltd, is a high-tech company dedicated to Internet services. Suqian Lechuang Information Technology Co., Ltd. building system has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information...

CVE-2020-28466

CVE-2020-28466 affects the nats-server component at github.com/nats-io/nats-server/server. The issue arises from an export/import cycle between accounts that untrusted users can trigger, causing the server to crash (denial of service) by consuming CPU/memory. Connected advisories indicate the 2.x...

ICSA-21-063-02_Schneider Electric EcoStruxure Building Operation (EBO)

1. EXECUTIVE SUMMARY CVSS v3 6.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Schneider Electric Equipment: EcoStruxure Building Operation Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Cross-site Scripting, Improper Restriction of XML External Entity...

SQL Injection Vulnerability in East 8 Brand Creative (Qingdao) Co.

East 8 Brand Creative Qingdao Co., Ltd. was established on May 25, 2006 . Legal representative Xu Jingwei, the company's scope of business includes: brand design, planning and promotion; graphic design; packaging design; network information technology services, website design, website constructio...

Better, or More Effective?

A colleague asked me to share my thoughts on building a "better team". I confess, I stumbled on the word "better". Better than what exactly?...

SQL Injection Vulnerability in the Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

File Upload Vulnerability in Sichuan Situzhi Travel Software Co.

Sichuan Situzhi Travel Software Co., Ltd. is a company focusing on providing digitalization, informatization and intelligence services for the development of intelligent tourism in the whole region. A file upload vulnerability exists in the website building system of Sichuan Situo Intelligent...

SQL Injection Vulnerability in Website Building System of Zibo Bangnuo Network Technology Co.

Zibo Bono Network Technology Co., Ltd. is an IT consulting company dedicated to the perfect combination of creativity and technology for Internet applications. There is a SQL injection vulnerability in the website building system of Zibo Bonnot Network Technology Co. Attackers can use the...

Code Injection in jeikeilim/kindle

Description Kindle is an easy model build package for PyTorch. Building a deep learning model became so simple that almost all model can be made by copy and paste from other existing model codes, which is vulnerable to Arbitary Code Execution. Vulnerability Vulnerable to YAML deserialization atta...

SQL Injection Vulnerability in Ar***.asp of Website Building System of Guangzhou Hande Network Technology Co.

HANDS network originated from ten years ago, the studio is committed to providing users with high-quality website construction solutions, business covering PC station, mobile station, to provide high-quality customized and special templates station building services. Ltd. website building system...

XYCMS suffers from SQL injection vulnerability (CNVD-2021-17386)

XYCMS is an enterprise building system developed with asp+access. XYCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain database information...

SQL injection vulnerability in pr***.asp page of website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. Ltd. website building system pr.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL injection vulnerability in ne***.asp page of website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. There is a SQL injection vulnerability in the ne.asp page of the website builder system of Ningbo Yilong Computer Technology ...

SQL injection vulnerability in eq***.asp page of website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. Ltd. website building system eq.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL injection vulnerability in the ca***.asp page of the website building system of Ningbo Yilong Computer Technology Co.

Ningbo YiLong Computer Technology Co., Ltd. is a design and build enterprise focusing on enterprise website platform, government school, home service and other industries. There is a SQL injection vulnerability in the ca.asp page of the website builder system of Ningbo Yilong Computer Technology ...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +6 more potentially affected by CVE-2021-26697 via apache-airflow (>=1.8.2 <=2.0.0rc3)

apache-airflow PYPI version =1.8.2, =0.1.0rc3, =0.1.0, =2.4.2, =1.7.2, =0.0.5, =0.0.6 Source cves: CVE-2021-26697 Source advisory: OSV:PYSEC-2021-3...

aglow (>=0.1.0rc3 <=0.1.0rc4), ai-flow (>=0.1.0 <=0.3.1) +6 more potentially affected by CVE-2021-26559 via apache-airflow (>=1.8.2 <=2.0.0rc3)

apache-airflow PYPI version =1.8.2, =0.1.0rc3, =0.1.0, =2.4.2, =1.7.2, =0.0.5, =0.0.6 Source cves: CVE-2021-26559 Source advisory: OSV:PYSEC-2021-2...

Oracle Linux 8 : dotnet (ELSA-2021-0474)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-0474 advisory. 2.1.521-1 - Update to .NET Core SDK 2.1.521 and Runtime 2.1.25 - Resolves: RHBZ1922272 Tenable has extracted the preceding description block directly from the...