SQL Injection Vulnerability in the Website Building System of Spiegel Fargo Network Security Information Technology Company Limited (CNVD-2021-01311)

Spiegel Fargo Network Security Information Technology Co., Ltd. was established on 11/09/2007. Legal representative Xu Binglian, the company's scope of business includes: computer network technology development, promotion; network security technology services and consulting. There is a SQL...

Henan Qingfeng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Henan Qingfeng Network Technology Co., Ltd. is a high-tech company mainly operating in network services, engaged in website production, network marketing planning, software development, talent information services and other businesses. Henan Qingfeng Network Technology Co., Ltd. website building...

Yunnan Huaji Youxiang Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-00622)

The business scope of Yunnan Huaji Youxiang Network Technology Co., Ltd. includes: the development of computer software and hardware and technical consulting, technology transfer, technical services; computer graphic design; web page design, etc.. Yunnan Huaji Youxiang Network Technology Co., Ltd...

HcCms has a logic flaw

HcCms is a free website building system developed in php language. Developed using the widely popular PHP MYSQL. HcCms has a logic vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in the Website Building System of Beijing SUNNETWISE TECHNOLOGY CO.

Ltd. specializes in website construction, website design, small and medium-sized enterprise management software development. There is a SQL injection vulnerability in the website building system of Beijing Sunwealth Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in the Frontend of Enterprise Website Building System of Zibo Shining Network Technology Co. Ltd (CNVD-2020-73484)

Zibo Shining Network Technology Co., Ltd. enterprise station building system is a specialized solution for enterprise station building products. There is a SQL injection vulnerability in the frontend of Zibo Shining Network Technology Co. Ltd enterprise website building system, which can be...

SQL Injection Vulnerability in the Website Building System of Beijing Leader Shengshi Network Technology Development Center (CNVD-2020-73459)

Founded in 2007, Beijing Leader Shengshi Network Technology Development Center is a professional network company that provides a full range of corporate digital services, APP WeChat development and operation, website construction and network marketing services. There is a SQL injection...

Authentication Failure

This is a weird story of a building owner commissioning an artist to paint a mural on the side of his building -- except that he wasnt actually the buildings owner. The fake landlord met Hawkins in person the day after Thanksgiving, supplying the paint and half the promised fee. They met again a...

Directory Traversal Vulnerability in Website Building System of Shanghai Niomai Network Technology Co.

Ltd. is a software company focusing on serving small and medium-sized courier and logistics enterprises. With a deep understanding of the current situation and development direction of the management and service of Chinese and foreign courier and logistics enterprises, the company has created a...

SQL Injection Vulnerability in the Backend of Website Building System of Shanghai Niomai Network Technology Co.

Ltd. is a software company focusing on serving small and medium-sized courier and logistics enterprises. With a deep understanding of the current situation and development direction of the management and service of Chinese and foreign courier and logistics enterprises, the company has created a...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3243-1)

This update for salt fixes the following issues : Avoid regression on 'salt-master': set passphrase for salt-ssh keys to empty string bsc1178485 Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490,...

SUSE SLED15 / SLES15 Security Update : salt (SUSE-SU-2020:3155-1)

This update for salt fixes the following issues : Properly validate eauth credentials and tokens on SSH calls made by Salt API bsc1178319, bsc1178362, bsc1178361, CVE-2020-25592, CVE-2020-17490, CVE-2020-16846 Fix disk.blkid to avoid unexpected keyword argument 'pubuser'. bsc1177867 Ensure...

SUSE SLES12 Security Update : libvirt (SUSE-SU-2020:3039-1)

This update for libvirt fixes the following issues : CVE-2020-15708: Added a note to libvirtd.conf about polkit auth in SUSE distros bsc1174955. CVE-2020-25637: Fixed a double free in qemuAgentGetInterfaces bsc1177155. qemu: Adjust max memlock on mdev hotplug bsc1177480. Xen: Don't add dom0 twice...

SQL Injection Vulnerability in the Website Building System of Shanghai Dicky Collar Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the website building system of Shanghai BeltLeader, which can be exploited by attackers to obtain sensitive...

File Upload Vulnerability in Website Building System of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a leading travel industry chain service provider with high market share in China. There is a file upload vulnerability in the website building system of Beijing Zhongcheng Kexin Technology Development Co., Ltd, which can be exploited by...

SQL Injection Vulnerability in Tianjin Billy Technology Development Co.

Tianjin Billy Science and Technology Development Co., Ltd. is a modern high-tech company with sales of instrumentation products, engineering design and management consulting as a whole. There is a SQL injection vulnerability in the website building system of Tianjin Billy Science and Technology...

SQL Injection Vulnerability in the Website Building System of Nanjing Qianzhixun Network Technology Co.

hereinafter referred to as: Nanjing Qian Zhi Xun Network Technology Co., Ltd., with advanced design concepts and excellent design works enjoy popular industry, is one of the local professional website construction company in Nanjing. Ltd. website construction system SQL injection vulnerability,...

Xingtai Netcommerce Software Development Co., Ltd. website building system with SQL injection vulnerability

Xingtai Netcommerce Software Development Co., Ltd. was founded on 03/28/2014. The company's business scope includes: software development the above business scope involves licensed items, should obtain permission from the relevant departments before operating and so on. Xingtai Netcommerce Softwa...

Terrascan - Detect Compliance And Security Violations Across Infrastructure As Code To Mitigate Risk Before Provisioning Cloud Native Infrastructure

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure. GitHub Repo: https://github.com/accurics/terrascan Documentation: https://docs.accurics.com Discuss: https://community.accurics.com Features 500+ Policies for...

Jinan Yuxia Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-71666)

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...