6525 matches found
Mybatis-PageHelper SQL注入漏洞
Mybatis-PageHelper is a paging plug-in. An SQL injection vulnerability exists in Mybatis-PageHelper versions 1.0 inclusive through 5.3.0 inclusive, which stems from the orderBy parameter's lack of validation for external input SQL statements. An attacker could use this vulnerability to execute...
New Hacker Group Pursuing Corporate Employees Focused on Mergers and Acquisitions
A newly discovered suspected espionage threat actor has been targeting employees focusing on mergers and acquisitions as well as large corporate transactions to facilitate bulk email collection from victim environments. Mandiant is tracking the activity cluster under the uncategorized moniker...
Fortinet FortiProxy SSL VPN跨站脚本漏洞
Fortinet FortiProxy SSL VPN is an application from Fortinet, Inc. A cross-site scripting vulnerability exists in Fortinet FortiProxy SSL VPN, which stems from inadequate cleaning of user-provided data and could be exploited by remote attackers to steal potentially sensitive information, alter the...
FBI warns food and agriculture to brace for seasonal ransomware attacks
The Federal Bureau of Investigation FBI recently released a Private Industry Notification warning agriculture cooperatives also known as "farmers co-ops" of the looming danger of well-timed ransomware attacks. The agency warns that during the critical planting and harvesting seasons, attacks coul...
New RIG Exploit Kit Campaign Infecting Victims' PCs with RedLine Stealer
A new campaign leveraging an exploit kit has been observed abusing an Internet Explorer flaw patched by Microsoft last year to deliver the RedLine Stealer trojan. "When executed, RedLine Stealer performs recon against the target system including username, hardware, browsers installed, anti-virus...
WordPress plugin Hermit SQL注入漏洞
WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The WordPress Hermit plugin 3.1.6 and previous versions are vulnerable to SQL injection, which stems from the la...
6 Best Data Security Practices You Can Start Today
Given the dramatic increases in the volume and frequency of data theft due to breaches and the increased threat of cyberattacks resulting from current conflicts, organizations worldwide are prioritizing tactical and strategic efforts to shore up their data security. Here are six best practices yo...
ED01-CMS SQL注入漏洞
Ed01-Cms is a Cms project in the Udemy course. version 20180505 of ED01-CMS is vulnerable to a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in post.php. An attacker could use this vulnerability to execute illegal SQL commands to steal...
CuppaCMS SQL注入漏洞
CuppaCMS is a content management system CMS.A SQL injection vulnerability exists in CuppaCMS v1.0, which originates from the lack of validation of external input SQL statements in /administrator/alerts/alertLightbox.php. An attacker could use this vulnerability to execute illegal SQL commands to...
WordPress plugin Advanced Page Visit Counter SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
Sourcecodester Baby Care System SQL注入漏洞（CNVD-2022-35520）
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin/uesrs.php & action=type & userrole=User & userid= in the userid parameter missing validation of...
Attendance and Payroll System SQL注入漏洞（CNVD-2022-33140）
Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminposition edit.php lacks validation of external input S...
Attendance and Payroll System SQL注入漏洞（CNVD-2022-33144）
Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...
Attendance and Payroll System SQL注入漏洞
Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminattendancedelete.php lacks validation for...
Attendance and Payroll System SQL注入漏洞（CNVD-2022-33147）
Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admincashadvanceedit.php lacks validation for external...
Simple Real Estate Portal System SQL注入漏洞（CNVD-2022-43407）
Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. Simple Real Estate Portal System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Simple Real Estate Portal System SQL注入漏洞
Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. version v1.0 of Simple Real Estate Portal System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Attendance and Payroll System SQL注入漏洞（CNVD-2022-33142）
Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminovertime edit.php lacks validation of external input S...
Purchase Order Management System SQL注入漏洞（CNVD-2022-44236）
Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
