Directory traversal vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

SQL injection vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

County-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd. suffers from unauthorized access vulnerability

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

Safe addresses can only be added but not removed

Handle 0xRajeev Vulnerability details Impact The addSafeAddress takes an address and adds it to a “safe list". This is used in eoaOnly to give exemption to safe addresses that are trusted smart contracts, when all other smart contacts are prevented from protocol interaction. The stated purpose is...

File upload vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co., Ltd (CNVD-2021-51387)

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

Flash loan risk mitigation is optional and not robust enough

Handle 0xRajeev Vulnerability details Impact The switchEoaOnly allows the owner to disable preventSmartContracts the project’s plan apparently is to do so after the beta-period which will allow any smart contract to interact with the protocol and potentially exploit any underlying flash loan...

File upload vulnerability in county-level flash flood monitoring and early warning system of Suzhou Mengtu Geographic Information System Co.

Suzhou Mengtu Geographic Information System Limited Liability Company is a high-tech company specializing in the research and development of geographic information system platform and the development of industry application software. Suzhou Mengtu Geographic Information System Limited Liability...

July 6, 2021—KB5004946 (OS Build 18363.1646) Out-of-band

None None...

Flash Games <= 2.2 - CSRF Bypass

The plugin does not properly check for CSRF in its cgwpsearchgame AJAX action, however we could not identify a risk associated with it...

WordPress Flash Games plugin <= 2.2 - Cross-Site Request Forgery (CSRF) Bypass vulnerability

Cross-Site Request Forgery CSRF Bypass vulnerability discovered by WPScanTeam in WordPress Flash Games plugin versions = 2.2. Solution Deactivate and delete. This plugin has been closed as of December 23, 2018 and is not available for download. Reason: Guideline Violation...

July 6, 2021—KB5004947 (OS Build 17763.2029) Out-of-band

None None...

July 6, 2021—KB5004945 (OS Builds 19041.1083, 19042.1083, and 19043.1083) Out-of-band

None None...

July 7, 2021—KB5004956 (Monthly Rollup) Out-of-band

None None...

July 6, 2021—KB5004954 (Monthly Rollup) Out-of-band

None None...

July 7, 2021—KB5004960 (Security-only update) Out-of-band

None None...

avoid paying insurance

Handle gpersoon Vulnerability details Impact It's possible to avoid paying insurance in the following way: once per hour at the right moment, do the following: ----using a flash loan, or with a large amount of tokens, call deposit of Insurance.sol to make sure that the pool is sufficiently filled...

Unauthorized Access Vulnerability in the Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co. Ltd (CNVD-2021-50615)

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Fujian Sichuang Software Co. Ltd, which can...

Unauthorized Access Vulnerability in the Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co. Ltd (CNVD-2021-50614)

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Fujian Sichuang Software Co. Ltd, which can...

June 29, 2021—KB5004760 (OS Builds 19041.1082, 19042.1082, and 19043.1082) Out-of-band

None None...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Information Management System of Sichuang Technology Co. Ltd (CNVD-2021-48908)

Siltronic is a company dedicated to the cause of disaster prevention and mitigation in China, providing the government with comprehensive solutions for disaster prevention and mitigation informatization. A SQL injection vulnerability exists in the Flash Flood Monitoring and Early Warning...