17 matches found
EUVD-2018-18539
Malware in sbrugna...
About the security content of macOS Big Sur 11.6.6
About the security content of macOS Big Sur 11.6.6 This document describes the security content of macOS Big Sur 11.6.6. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Apple macOS Big Sur 安全漏洞
Apple macOS Big Sur is the 17th major version of Apple's macOS Big Sur is the 17th major version of Apple's macOS for MAC operating system. Apple macOS Big Sur has a security vulnerability that originates from a CVMS initialization error, which can be exploited by an attacker to elevate privilege...
About the security content of Security Update 2022-004 Catalina
About the security content of Security Update 2022-004 Catalina This document describes the security content of Security Update 2022-004 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...
About the security content of Security Update 2021-003 Catalina
About the security content of Security Update 2021-003 Catalina This document describes the security content of Security Update 2021-003 Catalina. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has...
Company Visitor Management System (CVMS) 1.0 SQL Injection
Exploit Title: Company Visitor Management System CVMS 1.0 - Authentication Bypass Date: 16/10/2020 Exploit Author: Oğuz Türkgenç Vendor Homepage: https://phpgurukul.com/company-visitor-management-system-using-php-and-mysql/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=96...
Company Visitor Management System (CVMS) 1.0 - Authentication Bypass
Exploit Title: Company Visitor Management System CVMS 1.0 - Authentication Bypass Date: 16/10/2020 Exploit Author: Oğuz Türkgenç Vendor Homepage: https://phpgurukul.com/company-visitor-management-system-using-php-and-mysql/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=96...
Company Visitor Management System (CVMS) 1.0 SQL Injection
Exploit Title: Company Visitor Management System CVMS 1.0 - Authentication Bypass Date: 2020-07-20 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/company-visitor-management-system-using-php-and-mysql/...
Company Visitor Management System (CVMS) 1.0 SQL Injection Vulnerability
Company Visitor Management System CVMS version 1.0 suffers from multiple remote SQL Injection vulnerabilities, one of which allows for authentication bypass. Exploit Title: Company Visitor Management System CVMS 1.0 - Authentication Bypass Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos68...
Apple macOS Catalina CVMS Component Buffer Overflow Vulnerability
Apple macOS Catalina is a specialized operating system developed by Apple for Mac computers, of which CVMS is a core virtual machine server component. A security vulnerability exists in the CVMS component in Apple macOS Catalina versions prior to 10.15.5. An attacker could exploit the vulnerabili...
Multiple SQL Injection Vulnerabilities in Saifor CVMS HUBs
Saifor CVMS HUB is a data center visual management system from the Saifor team in Spain. Multiple SQL injection vulnerabilities exist in Saifor CVMS HUB version 1.3.1. A remote attacker can exploit this vulnerability by sending multiple parameters to /cvms-hub/privado/seccionesmib/secciones.xhtml...
CVE-2018-6792
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
CVE-2018-6792
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
Sql injection
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
CVE-2018-6792
Consolidated view: Saifor CVMS HUB 1.3.1 contains Multiple SQL injection vulnerabilities exploitable by an authenticated user. The flaw allows executing arbitrary SQL commands via multiple POST parameters to /cvms-hub/privado/seccionesmib/secciones.xhtml (parameters j_idt118, j_idt120, j_idt122, ...
CVE-2018-6792
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...
CVE-2018-6792: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Saifor CVMS HUB 1.3.1 allow an authenticated user to execute arbitrary SQL commands via multiple parameters to the /cvms-hub/privado/seccionesmib/secciones.xhtml resource. The POST parameters are jidt118, jidt120, jidt122, jidt124, jidt126, jidt128, and...