CloudBees Jenkins Cross-Site Scripting Vulnerability (CNVD-2021-07539)

CloudBees Jenkins Hudson Labs is the United States CloudBees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed execution of the task . A cross-site scripting...

Loopholes in the uploading of documents on the rural collective "three capitals" management service platform

Guangzhou Beijia Software Development Co., Ltd. is a national high-tech enterprise specializing in software development and operation and maintenance services for rural property rights management and transfer services also known as three capitals management and trading. There is a file upload...

Upcoming Rapid7 Webcast: How Far Does Your VRM Strategy Go?

Web applications have been growing in complexity over the past several years, while also becoming the preferred method for attackers looking to capitalize on emergent technologies. This is a trend that will only persist and evolve, so it’s crucial to extend your web application testing strategy t...

CVE-2021-23272 TIBCO BPM Cross Site Scripting (XSS)

The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting XSS attack o...

Jinan Yuxia Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-12787)

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

IBM Spectrum Scale 安全漏洞

IBM Spectrum Scale is a high-performance shared disk file management solution that gives you fast, reliable access to data from multiple servers. A log casting vulnerability exists in IBM Spectrum Scale 5.0.0 - 5.0.5.4, 5.1.0. A local user can exploit this vulnerability to impact support and...

[SECURITY] Fedora 32 Update: python-pillow-7.0.0-5.fc32

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

java-1.8.0-openjdk bug fix and enhancement update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Bug Fixes and Enhancements: Currently, Java applications run with Speculative Store Bypass SSB, CVE-2018-3639 disabled. Disabling SSB results in a performance degradatio...

[SECURITY] Fedora 33 Update: python-pillow-7.2.0-3.fc33

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

CTF-All-In-One

This is a book about CTF Capture The Flag competitions, specifically the Pwn binary exploitation module. The book is written by Yang Cheng, a member of L-Team, and is aimed at beginners. It covers the basics of binary security, including x86/x64 platforms, Linux systems, and the basics of exploit...

Exploit for Command Injection in Rubyonrails Rails

CVE-2019-5420 Ruby-on-Rails offers three different environmen...

CVE-2021-2067

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside...

Combodo iTop Code Issue Vulnerability

Combodo iTop is a French company Combodo ITIL-based development and for the daily operation of the IT environment of open source Web applications. The program provides incident management, configuration management and problem management functions. A code issue vulnerability exists in Combodo iTop...

Dongguan Chindo Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Dongguan Chindo Network Technology Co., Ltd. business scope is: computer hardware and software, network technology development, consulting: consulting services related to business management; computer network technology promotion services, etc.. Dongguan Chindo Network Technology Co., Ltd. statio...

DLL Hijacking Vulnerability in 115 PC Version of Guangdong One One Five Technology Co.

The business scope of Guangdong Yi Yi Wu Technology Co., Ltd. includes: design, development and sales of computer software and hardware; design, release, production and agency of domestic and foreign advertisements; and provision of computerized page production. Ltd. 115 computer version of the D...

SolarWinds: What Hit Us Could Hit Others

New research into the malware that set the stage for the megabreach at IT vendor SolarWinds shows the perpetrators spent months inside the companys software development labs honing their attack before inserting malicious code into updates that SolarWinds then shipped to thousands of customers. Mo...

CVE-2021-1725

Bot Framework SDK Information Disclosure Vulnerability...

PYSEC-2021-422

Bot Framework SDK Information Disclosure Vulnerability...

File Upload Vulnerability in the Remote Processing System for Journal Manuscripts of Beijing Magtech Technology Development Co.

Journal Manuscript Remote Processing System is a platform for remote processing of journal manuscripts developed independently by Beijing Magtech. A file upload vulnerability exists in the Journal Manuscript Remote Processing System of Beijing Magtech Technology Development Company Limited, which...

HBuilder windows version has dll hijacking vulnerability

HBuilder is a web development IDE that supports HTML5 from DCloud Digital Heaven. A dll hijacking vulnerability exists in HBuilder windows version. An attacker can exploit this vulnerability to execute malicious code...