BIT-GITLAB-2021-22170

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content...

Exploit for SQL Injection in Rems School_Task_Manager

CVE-2024-24142: School-Task-Manager-System-SQL-Inject...

Intern Record System v1.0 - SQL Injection (Unauthenticated)

Exploit Title: Intern Record System v1.0 - SQL Injection Unauthenticated Date: 2022-06-09 Exploit Author: Hamdi Sevben Vendor Homepage: https://code-projects.org/intern-record-system-in-php-with-source-code/ Software Link:...

InfraGard infiltrated by cybercriminal

InfraGard, a partnership between the FBI and members of the private sector that was established to protect critical infrastructure in the US, has been infiltrated by a cybercriminal. As a result, its database of contact information is now for sale on an English-language cybercrime forum. InfraGar...

Gun Database Breach Leaks Details on Thousands of Owners

Plus: Indian hacker-for-hire groups, Chinese student espionage efforts, and more...

VoIPmonitor SQL注入漏洞

VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. With a commercial front-end for SIP RTP RTCP SKINNY SCCP MGCP WebRTC VoIP protocol running on Linux, VoIPmonitor version 24.61 is vulnerable to a SQL injection vulnerability caused by missing filter escaping for SQL...

Heroku Forces User Password Resets Following GitHub OAuth Token Theft

Salesforce-owned subsidiary Heroku on Thursday acknowledged that the theft of GitHub integration OAuth tokens further involved unauthorized access to an internal customer database. The company, in an updated notification, revealed that a compromised token was abused to breach the database and...

CVE-2021-45411

In Sourcecodetester Printable Staff ID Card Creator System 1.0 after compromising the database via SQLi, an attacker can log in and leverage an arbitrary file upload vulnerability to obtain remote code execution...

CVE-2021-22170

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content...

CVE-2021-22170

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content...

Code injection

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content...

CVE-2021-22170

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content...

UBUNTU-CVE-2021-22170

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content...

CVE-2021-22170

Assuming a database breach, nonce reuse issues in GitLab 11.6+ allows an attacker to decrypt some of the database's encrypted content...

CVE-2021-22170

CVE-2021-22170 concerns GitLab 11.6+ where nonce reuse in the database encryption enables an attacker to decrypt some of the database’s encrypted content. Root cause: repeated nonces in encryption. Impact: partial confidentiality loss of data; no integrity/availability changes stated. Connected s...

CVE-2021-22170

Removed by vendor...

SQL Injection Vulnerability in Smart Meter Integrated Management System of Xintian Technology Corporation (CNVD-2021-70043)

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitive...

AT&T breach? ShinyHunters selling AT&T database with 70 million SSN

By Waqas In a post published on an infamous hacker forum and marketplace Raid Forums, ShinyHunters is offering the database for starting price of $200k. This is a post from HackRead.com Read the original post: AT&T breach? ShinyHunters selling AT&T database with 70 million SSN...

SQL Injection Vulnerability in Shanghai Yishang Network Technology Co.

Shanghai Yishang Network Technology Co., Ltd. is a company that provides all kinds of enterprises with enterprise website construction, website hosting and maintenance, webpage planning and design, graphic logo design, enterprise album design, cell phone website development, video presenter...

Database with 100,300 CityBee users’ login credentials leaked online

By Saad Rajpoot According to the hacker behind the breach, they found the backup database of CityBee exposed on the internet for public access. This is a post from HackRead.com Read the original post: Database with 100,300 CityBee users login credentials leaked online...