Weak password vulnerability in AC centralized management platform of China Construction Zhiyun Network Communications Co.

CCTC Zhiyun Network Communications Co., Ltd. is a service provider specializing in the research and development, production, sales and service of network communications equipment, and providing network security, routers, switches, firewalls, wireless AP coverage and other network products and...

SQL Injection Vulnerability in Website Building System of Dongguan Lightspeed Network Technology Limited (CNVD-2021-28472)

Dongguan Lightspeed Network Technology Co., Ltd. was founded on April 12, 2006, providing customized website construction related services, including website construction website design and production/web design and production, domain name registration, web hosting, enterprise mailbox and so on. ...

envoy:config_fuzz_test: Container-overflow in void std::__1::allocator<unsigned long>::construct<unsigned long, unsigned long

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5580501801893888 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: configfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Container-overflow WRITE 8 Crash Address:...

Qingdao Kechuang Internet Technology Co., Ltd. website building system suffers from sql injection vulnerability

Ltd. is a high-tech science and technology enterprise integrating software development, website construction, system integration, mobile APP development, mobile online shopping mall, and Internet application service. Qingdao Kechuang Internet Technology Co., Ltd. website construction system there...

Under Construction, Coming Soon & Maintenance Mode < 1.1.2 - Server Side Request Forgery (SSRF)

The includes/mc-getlists.php file used the 'apiKey' POST parameter to create an https URL from it without sanitisation and called it with cURL, leading to a SSRF issue. The issue is exploitable via direct access to the affected file, and ucmmmcapi AJAX call available to both authenticated and...

Under Construction, Coming Soon & Maintenance Mode < 1.1.2 - Reflected Cross-Site Scripting (XSS)

The includes/mc-getlists.php file decoded JSON data fetched from the URL provided and then displayed the HTML from the response without any HTML escaping, leading to a reflected cross-site scripting issue where the payload is on a different server controlled by the attacker for example. The issue...

Under Construction, Coming Soon & Maintenance Mode < 1.1.2 - Reflected Cross-Site Scripting (XSS)

The includes/mc-getlists.php file decoded JSON data fetched from the URL provided and then displayed the HTML from the response without any HTML escaping, leading to a reflected cross-site scripting issue where the payload is on a different server controlled by the attacker for example. The issue...

WordPress Under Construction, Coming Soon & Maintenance Mode plugin <= 1.1.1 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Mr.F in WordPress Under Construction, Coming Soon & Maintenance Mode plugin versions = 1.1.1. Solution Update the WordPress Under Construction, Coming Soon & Maintenance Mode plugin to the latest available version at least 1.1.2...

WordPress Under Construction, Coming Soon & Maintenance Mode plugin <= 1.1.1 - Server-Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability found by Mr.F in WordPress Under Construction, Coming Soon & Maintenance Mode plugin versions = 1.1.1. Solution Update the WordPress Under Construction, Coming Soon & Maintenance Mode plugin to the latest available version at least 1.1.2...

Wenzhou Yougu Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-16397)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

Wenzhou Yougu Technology Co., Ltd. website building system has SQL injection vulnerabilities (CNVD-2021-16395)

Wenzhou Yougu Technology Co., Ltd. is committed to website construction and development, multimedia production, the company set up a mobile division, focusing on WeChat mobile system development. Wenzhou Yougu Technology Co., Ltd. station building system there is a SQL injection vulnerability, th...

Less-openui5 Injection Vulnerability

An injection vulnerability exists in Less-openui5, which arises when a network system or product lacks proper validation of user input during the course of an operation to construct a command, data structure, or record, and fails to filter, or fails to correctly filter out, specific elements of t...

SQL Injection Vulnerability in the Website Building System of Foshan City Sohu Network Technology Co.

Foshan City, Sohu Network Technology Co., Ltd. is a commitment to provide a full range of web site construction services for the enterprise Internet company. Foshan City, Sohu Network Technology Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability ...

Is-user-valid Injection Vulnerability

An injection vulnerability exists in Is-user-valid, which arises when, during the course of a user input operation to construct a command, data structure, or record, the network system or product lacks proper validation of the user input data, and fails to filter, or fails to correctly filter out...

Zhejiang Mufeng Network Technology Co., Ltd. station building system SQL injection vulnerability

Zhejiang Mufeng Network Technology Co., Ltd. is a website construction, website production, website development, graphic design and other core enterprises. Zhejiang Mufeng Network Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers t...

Jinan Bo Lin Network Technology Co., Ltd. website building system ne*** page SQL injection vulnerability

Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...

Jinan Yuxia SQL Injection Vulnerability SQL Injection Vulnerability (CNVD-2021-15958)

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

Cxcms Has Logic Flaw Vulnerability

Changshu Changxiang Computer Information Technology Co., Ltd. was founded in July 2010, to provide enterprises with website construction, WeChat small program, public number, management software, Internet of Things, management software custom development services, with a number of software...

Hackers Accidentally Expose Passwords Stolen From Businesses On the Internet

A new large-scale phishing campaign targeting global organizations has been found to bypass Microsoft Office 365 Advanced Threat Protection ATP and steal credentials belonging to over a thousand corporate employees. The cyber offensive is said to have originated in August last year, with the...

Under Construction < 3.86 - Authenticated Stored Cross-Site Scripting (XSS)

The Underconstruction plugin admin configuration is vulnerable to stored XSS issues which will be triggered in the main page of the site, even when the unfilteredhtml is disabled. Edit WPScanTeam A fix was attempted in v3.80, but was insufficient. In the meantime, more fields were found to be...