370 matches found
Online Sports Complex Booking System SQL注入漏洞（CNVD-2022-58676）
Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletefacility, the id parameter of the po...
CVE-2022-29986
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletefacility...
CVE-2022-29994
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/managefacility&id=...
CVE-2022-29986
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletefacility...
CVE-2022-29994
Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/managefacility&id=...
Online Sports Complex Booking System SQL注入漏洞
Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletefacility, the id parameter of the po...
Factors to Consider when Choosing a Robotic Arm
By Owais Sultan When deciding on an industrial robot for your facility, many options are to be considered. This article will… This is a post from HackRead.com Read the original post: Factors to Consider when Choosing a Robotic Arm...
Hackers Abuse Mitel Devices to Amplify DDoS Attacks by 4 Billion Times
Threat actors have been observed abusing a high-impact reflection/amplification method to stage sustained distributed denial-of-service DDoS attacks for up to 14 hours with a record-breaking amplification ratio of 4,294,967,296 to 1. The attack vector – dubbed TP240PhoneHome CVE-2022-26143 – has...
Hospital Managment System SQL注入漏洞
Hospital Managment System HMS is a computer or web-based system that helps manage the operations of a hospital or any healthcare facility.Hospital Managment System is vulnerable to a SQL injection vulnerability that stems from a database based application that lacks validation of externally enter...
Security Bulletin: Apache Log4j vulnerabilities impact z/Transaction Processing Facility (z/TPF) and TPF Operations Server (CVE-2021-45105, CVE-2021-45046)
Summary The Apache Log4j vulnerabilities affect the z/Transaction Processing Facility z/TPF system and TPF Operations Server. Several Java applications on the z/TPF system depend on Apache Log4j capabilities. Additionally, the 64-bit Java support in TPF Operations Server uses Apache Log4j...
TCMAN GIM licensing issue vulnerability
TCMAN Gim is facility management software designed for use on mobile devices.An authorization issue vulnerability exists in TCMAN GIM, which stems from a program's failure to perform authorization checks when attempting to access identified resources, which could be exploited by an attacker to...
TCMAN GIM License Ask Vulnerability (CNVD-2022-07491)
TCMAN Gim is a facility management software designed for use on mobile devices.TCMAN GIM has an authorization question vulnerability that could be exploited by attackers to gain access to information...
TCMAN GIM 安全漏洞
TCMAN Gim is facility management software designed for use on mobile devices.An authorization issue vulnerability exists in TCMAN GIM, which stems from a program's failure to perform authorization checks when attempting to access identified resources, which could be exploited by an attacker to...
Tcman Gim 输入验证错误漏洞
TCMAN Gim is facility management software designed for use on mobile devices.TCMAN GIM contains an open redirection vulnerability that could be exploited by an attacker to redirect users to an attacker-controlled page and obtain information...
Tcman Gim SQL注入漏洞
Tcman Gim is a facility management software from Tcman Spain designed for use on mobile devices. TCMAN GIM suffers from a SQL injection vulnerability that can be exploited via the "/PC/WebService.asmx" page...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect z/Transaction Processing Facility
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 that is used by the z/TPF system. z/TPF has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-2341 DESCRIPTION: An unspecified vulnerability in Java SE related to the Networking component cou...
New research shows IoT and OT innovation is critical to business but comes with significant risks
The need for much improved IoT and operational technology OT cybersecurity became clearer this year with recent attacks on network devices,1 surveillance systems,2 an oil pipeline,3 and a water treatment facility,4 to name a few examples. To better understand the challenges customers are facing,...
New research shows IoT and OT innovation is critical to business but comes with significant risks
The need for much improved IoT and operational technology OT cybersecurity became clearer this year with recent attacks on network devices,1 surveillance systems,2 an oil pipeline,3 and a water treatment facility,4 to name a few examples. To better understand the challenges customers are facing,...
shinefacilityservices.com Improper Access Control vulnerability OBB-2214893
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: IBM SDK, Java Tech Edition Quarterly CPU Jul 2021 - Includes Oracle Jul 2021 CPU (minus CVE-2021-2341)
Summary This Security Bulletin provides steps for updating Java for Db2 Query Management Facility QMF Workstation and QMF Vision. Vulnerability Details CVEID: CVE-2021-2388 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow an unauthenticated attacker to...