SQL Injection Vulnerability in the Construction System of Hangzhou Bar Zero Technology Co.

Hangzhou Ba Zero Technology Co., Ltd. is a collection of website construction, enterprise mailbox, 400 telephone, network integrated marketing, web design, cell phone version of the website production, e-commerce applications, graphic design and other information technology services. There is a S...

SQL Injection Vulnerability in Hefei Blue Collar Business Information Co.

Hefei Blue Collar Business Information Co., Ltd. is a professional Internet basic application service operators, mainly engaged in Hefei website construction, website planning and so on. There is a SQL injection vulnerability in Hefei Blue Collar Business Information Co., Ltd.'s website...

SQL Injection Vulnerabilities in the Integrated Business Management System for Supervision Enterprises and the Integrated Business Management System for Construction Enterprises of Guangdong Century ICT Network Technology Co.

Guangdong Century ICT Network Technology Co., Ltd. is engaged in engineering and construction enterprise informatization, management consulting enterprises, national high-tech enterprises, national certification double-soft enterprise. Guangdong Century ICT Network Technology Co., Ltd. supervisio...

SQL Injection Vulnerability in Website Building System of Chifeng E-top Network Co. Ltd (CNVD-2020-41776)

Ltd. is mainly engaged in website construction, website promotion, website planning, software development, network promotion, network integrated marketing and other businesses. There is a SQL injection vulnerability in the website construction system of Chifeng E-top Network Co., Ltd, which can b...

GSA Bounty: Limited LFI

Summary: Due to improper parameter sensitization local file inclusion is possible. LFI is limited as we were not able to truncate the end of string. Description: Application root is located at /var/www/dashboard/new/public Due to URL Manipulation we are able to raed file from...

GnuTLS: Information disclosure

Background GnuTLS is an Open Source implementation of the TLS and SSL protocols. Description A flaw was reported in the TLS session ticket key construction in GnuTLS. Impact A remote attacker could recover previous conversations in TLS 1.2 and obtain sensitive information or conduct a...

Debian: Security Advisory (DSA-4697-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SQL Injection Vulnerability in the Website Building System of Tianze Culture Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

SQL Injection Vulnerability in the Website Building System of Tianze Culture Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

SQL Injection Vulnerability in the Website Building System of Tianze Cultural Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

UBUNTU-CVE-2020-11078

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as...

Design/Logic Flaw

In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for httplib2.Http.request could change request headers and body, send additional hidden requests to same server. This vulnerability impacts software that uses httplib2 with uri constructed by string concatenation, as...

CVE-2020-1695

A flaw was found in all resteasy 3.x.x versions prior to 3.12.0.Final and all resteasy 4.x.x versions prior to 4.6.0.Final, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to...

Unauthorized Access Vulnerability in CIC Information Technology Co.

CIC Shengshi Information Technology Co., Ltd. is a professional and comprehensive media company integrating enterprise planning, website construction, advertisement production, information release, network promotion, film and television production and advertisement information consulting. There i...

Information leakage vulnerability in the website building system of Beijing Jinfang Times Technology Co.

Beijing Jinfang Times Technology Co., Ltd. provides high-end website construction services for enterprises, institutions and government agencies. There is an information leakage vulnerability in the website construction system of Beijing Jinfang Times Technology Co., Ltd, which can be exploited b...

Xi'an Baolian Network Technology Co., Ltd. construction system has logical flaws and vulnerabilities

Xi'an BaiLian Network Technology Co., Ltd. is the first technology company specializing in bearing industry management software development and bearing industry portal design. There is a logic flaw vulnerability in the construction system of Xi'an Bailian Network Technology Co. Attackers take...

SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co.

Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. Inner Mongolia Hohai Trade Co., Ltd. website construction system there is a SQL injection vulnerability, attackers can use the vulnerability t...

NETGEAR D3600, D6000 and XR500 OS Command Injection Vulnerability (CNVD-2020-27258)

NETGEAR D3600 and others are products of NETGEAR Corporation.NETGEAR D3600 is a wireless modem.NETGEAR D6000 is a wireless modem.NETGEAR XR500 is a wireless router.NETGEAR XR500 is a wireless router. An operating system command injection vulnerability exists in the NETGEAR D3600 prior to version...

Unspecified Vulnerability in Oracle Construction and Engineering Suite Primavera P6 Enterprise Project Portfolio Management

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

CVE-2020-2594

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...