Beijing Century Superstar Information Technology Development Co., Ltd.'s Learning Pass suffers from a stored XSS vulnerability

LearningTone is a course learning, knowledge dissemination and management sharing platform built on a microservice architecture. There is a stored XSS vulnerability in Beijing Century Super Star Information Technology Development Limited Liability Company's Learning Pass, which can be exploited b...

JVN#46239102: Multiple vulnerabilities in Exment

Exment provided by Kajitori Co.,Ltd contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2022-38080 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N| Base Score: 5.4 CVSS v2| AV:N/AC:H/Au:S/C:N/I:P/A:N| Base Score: 2.1...

Damon database management system suffers from information leakage vulnerability (CNVD-2022-67504)

Damon Database is a large-scale general-purpose relational database developed by Wuhan Damon Database Co. There is an information disclosure vulnerability in the Damon database management system that can be exploited by attackers to obtain sensitive information...

Beijing Missy Technology Co., Ltd. play whale app has file upload vulnerability

Play Whale app is a sound dating software. Ltd. play whale app file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...

SQL Injection Vulnerability in the Integrated Management System of River Management System of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the integrated river management system of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from the database...

File upload vulnerability exists in the website building system of Hangzhou Bocai Network Technology Co.

Ltd. is an innovative company that provides comprehensive digital services including strategy consulting, visual design, technology development, content manufacturing and marketing. There is a file upload vulnerability in the website building system of Hangzhou Bocai Network Technology Co...

Command Execution Vulnerability in MCMS of Jiangxi Minsoft Technology Co. Ltd (CNVD-2022-61927)

MCms is a complete open source content management system. Jiangxi Mingsoft Technology Co., Ltd MCMS has a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...

Information leakage vulnerability in Damon Database Management System of Wuhan Damon Database Co. Ltd (CNVD-2022-62400)

Damon database management system is a high-performance database management system with completely independent intellectual property rights launched by Damon, referred to as DM. Wuhan Damon Database Co. Damon Database Management System suffers from an information leakage vulnerability, which can b...

Code Execution Vulnerability in Damon 8 Database Kirin Edition

Wuhan Damon Database Co., Ltd. is specialized in providing big data platform architecture consulting, data technology solution planning, product deployment and implementation in one big data platform company. A code execution vulnerability exists in Damon 8 Database Kirin Edition, which can be...

US Blacklists Tornado Cash, GitHub Removes Co-Founder in Response

By Deeba Ahmed The US Treasury Department has blacklisted Tornado Cash on the accusation that the platform helped bad actors harvest… This is a post from HackRead.com Read the original post: US Blacklists Tornado Cash, GitHub Removes Co-Founder in Response...

SQL Injection Vulnerability in MCms of Jiangxi Minsoft Technology Co. Ltd (CNVD-2022-62417)

MCms is a java-based development of a lightweight open source content management system . Jiangxi Minsoft Technology Co., Ltd MCms SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

southernmotorcosc.com Cross Site Scripting vulnerability OBB-2830630

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cheekygrogco.com.au Cross Site Scripting vulnerability OBB-2829787

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Huatian Power OA system arbitrary file upload vulnerability

Huatian Dynamics OA System is a collaborative office software developed by Dalian Huatian Software Co. There is an arbitrary file upload vulnerability in Huatian Power OA system, which can be exploited by attackers to upload arbitrary files to the server...

wilkerdesignco.com Cross Site Scripting vulnerability OBB-2821946

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

co-rider.fr Cross Site Scripting vulnerability OBB-2816727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ump.co.za Cross Site Scripting vulnerability OBB-2804834

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Shenzhen Greenlink Technology Co., Ltd DH2100 has a logic flaw vulnerability

DH2100 is a private cloud product that focuses on simplicity and ease of use. Ltd. DH2100 has a logic flaw vulnerability, which can be exploited by attackers to obtain sensitive information...

Fedora: Security Advisory for grafana-pcp (FEDORA-2022-3e1ade35db)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-32458 Data Systems Consulting Co., Ltd. BPM - XML External Entity (XXE) Injection

Digiwin BPM has a XML External Entity Injection XXE vulnerability due to insufficient validation for user input. An unauthenticated remote attacker can perform XML injection attack to access arbitrary system files...