1073 matches found
SQL Injection Vulnerability in the Joint Exam Version of Xi'an Runge Electronic Technology Co.
The business scope of Xi'an Runge Electronic Technology Co., Ltd. includes: sales of electronic products, computer software and hardware; computer software, electronic products and so on. Xi'an Runge Electronic Technology Co., Ltd. marking cloud platform joint examination version of the SQL...
GDir-Thief - Red Team Tool For Exfiltrating The Target Organization'S Google People Directory That You Have Access To, Via Google's API
Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's People API. HOW TO Create a new Google Cloud Platform GCP project Steps to get the Google API Access Token needed for connecting to the API 1. Create a burner gmail/google accoun...
Google Cloud Platform Settings
Binary data gcpsettings.nbin...
Google Cloud Platform Compliance Checks
Binary data gcpcompliancecheck.nbin...
Unpatched Virtual Machine Takeover Bug Affects Google Compute Engine
An unpatched security vulnerability affecting Google's Compute Engine platform could be abused by an attacker to take over virtual machines over the network. "This is done by impersonating the metadata server from the targeted virtual machine's point of view," security researcher Imre Rad said in...
Weak password vulnerability of EasyGBS of Anhui Xufan Information Technology Co.
EasyGBS is a national standard video cloud platform developed by Anhui Xufan Information Technology Co. Anhui Xufan Information Technology Co., Ltd EasyGBS has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...
Directory Traversal Vulnerability in Xiamen Phoenix Chuangyi Software Ltd.'s Chuangyi 100VR Visualization Intelligent Interactive Teaching Cloud Platform
The business scope of Xiamen Phoenix Chuangyi Software Co., Ltd. includes: software development; Internet information services; book publishing; newspaper publishing, and so on. Xiamen Phoenix Chuangyi Software Co., Ltd Chuangyi 100VR visualization intelligent interactive teaching cloud platform...
SQL Injection Vulnerability in Property Integrated Billing Management Cloud Platform of Shenzhen Zhongdian Electric Power Technology Co.
Property integrated billing management system is based on cloud computing, Internet of Things and advanced intelligent billing management technology, realizes flexible access of intelligent power consumption data of electric power system and data of other intelligent terminals, supports...
Weak Password Vulnerability in Beidou Active Security Cloud Platform
Founded in March 2012, Hunan Changshang Technology Co., Ltd. is a high-tech enterprise integrating R&D, manufacturing, sales and service of electronic technology and its related products. There is a weak password vulnerability in Beidou Active Security Cloud Platform, which can be exploited by...
SAP Commerce Cloud 跨站脚本漏洞
SAP Commerce Cloud is a set of cloud-based e-commerce platform from Germany's SAP. It supports sales management, marketing management, order management, and operations management. SAP Commerce Cloud suffers from a cross-site scripting vulnerability that stems from a vulnerability in MIME sniffing...
SQL Injection Vulnerability in Starfire Cloud Platform System
The business scope of Beijing Shengshi Starfire Education Technology Limited Liability Company includes technology development, computer animation design, education consulting, and rental of office space. A SQL injection vulnerability exists in the Starfire Cloud Platform system. An attacker can...
Weak Password Vulnerability in Riptide Networks MCP Marketing Cloud Platform
MCP Cloud Marketing Platform is a wireless advertisement push platform system developed by Ruijie Networks for commercial places such as trade chains, hotels, shopping centers, wireless cities, transportation stations, tourist attractions and other commercial places with advertisement marketing...
Logic Flaw Vulnerability in Education Cloud Platform System of Beijing Zhongke Liancheng Software Co.
Ltd. was founded in 2012, is a comprehensive software and information services of high-tech dual-soft enterprise. A logic flaw exists in the education cloud platform system of Beijing Zhongke Liancheng Software Company Limited, which can be exploited by attackers to obtain sensitive information...
CVE-2020-28722
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting XSS vulnerability that can lead to an account takeover via custom email templates...
Cross site scripting
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting XSS vulnerability that can lead to an account takeover via custom email templates...
CVE-2020-28722
Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting XSS vulnerability that can lead to an account takeover via custom email templates...
CVE-2020-28722
CVE-2020-28722 affects Deskpro Cloud Platform and on‑premise Deskpro 2020.2.3.48207. The vulnerability is a cross-site scripting (XSS) flaw in custom email templates that can lead to an account takeover. The provided connected documents confirm the product, version, and impact, but do not include...
Unauthorized Access Vulnerability in Management Information Technology Practical Training Cloud Platform of Changjie Tong Information Technology Co.
Ltd. is a company dedicated to providing platform services, application services, and value-added data services centered on financial and management services for small and medium-sized enterprises in China. An unauthorized access vulnerability exists in the Management Information Technology...
Deskpro 跨站脚本漏洞
Deskpro is a suite of helpdesk software from Deskpro UK. The software includes, among other things, a customer relationship management component that provides features such as email, live chat, and voice. A cross-site scripting vulnerability exists in Deskpro Cloud Platform. The vulnerability cou...