[SECURITY] Fedora 31 Update: irssi-1.2.2-1.fc31

Irssi is a modular IRC client with Perl scripting. Only text-mode frontend is currently supported. The GTK/GNOME frontend is no longer being maintained...

SQL Injection Vulnerability in the Frontend of Nanjing Benan Work Safety Accident Hidden Trouble Detection and Management Information System V2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. SQL injection vulnerability exists in the front-end of Nanjing Benan's Hidden Accident Investigation and Management Information System...

Unauthorized Access Vulnerability in the Frontend of Nanjing Benan's Hidden Trouble Identification and Management Information System for Work Safety V2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Unauthorized access vulnerability exists in the front-end of Nanjing Benan's Hidden Accident Investigation and Management Information...

SQL Injection Vulnerability in the Frontend Web*** of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Nanjing Benan Safety Production Accident Hidden Trouble Detection and Management Information System v2.3 There exists a SQL injection...

File Upload Vulnerability in the Frontend of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. There is a file upload vulnerability in the frontend of Nanjing Benan's Hidden Trouble Identification and Management Information System...

XSS Vulnerability in JC Retail Management Information System JC RMIS Frontend

Ongie is an innovative enterprise that provides fully integrated information system solutions and cloud services for retail enterprises with software development as its core, and is a full-service, integrated solution provider for the retail industry in China. JC Retail Management Information...

SQL Injection Vulnerability in JC Retail Management Information System JC RMIS Frontend

Ongie is an innovative enterprise that provides fully integrated information system solutions and cloud services for retail enterprises with software development as its core, and is a full-service, integrated solution provider for the retail industry in China. A SQL injection vulnerability exists...

File Upload Vulnerability in Suntang Information Technology Laboratory Integrated Management System V6.0 Frontend

Suntang University Laboratory Resource Sharing Platform helps universities to establish a collaborative mechanism for resource sharing and laboratory opening, and provides a platform for resource allocation integration and teamwork for scientific research and innovation. A file upload vulnerabili...

SQL Injection Vulnerability in the Frontend of Laboratory Integrated Management System of Hunan Santang Information Technology Co.

Hunan Suntang Information Technology Co., Ltd. takes IT operation and maintenance integration platform and IT operation and maintenance service sharing platform as the core, and builds "Internet of Things" type IT integration operation and maintenance platform with the business system supplemente...

Arbitrary Password Reset Vulnerability in the Frontend of Laboratory Integrated Management System of Hunan Suntang Information Technology Co.

Hunan Suntang Information Technology Co., Ltd. takes IT operation and maintenance integration platform and IT operation and maintenance service sharing platform as the core, and builds "Internet of Things" type IT integration operation and maintenance platform with the business system supplemente...

CVE-2019-15953

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not own by calling the associated API. The product correctly manages privileges only for the front-end resource path, not for API requests. This leads to vertica...

SQL Injection Vulnerability in YouDianCMS Frontend Cu***.cl***.php File

YouDianCMS is an enterprise website management system developed by Changsha YouDian Software Technology Co. A SQL injection vulnerability exists in the Cu.cl.php file in the frontend of YouDianCMS. An attacker can use the vulnerability to obtain sensitive information from the database...

XXE Injection Vulnerability in UsualToolCMS Frontend

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. An XXE injection vulnerability exists in the frontend of UsualToolCMS. An attacker can exploit the vulnerability to remotely read arbitrary files on the server...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

Unauthorized Access Vulnerability in the Frontend of Smartstone Online Training and Learning System of Shijiazhuang Lingstone Technology Co.

Smartstone Online Training and Learning System is an online learning platform that integrates both passive training and active learning modes and supports multi-level authorization management. There is an unauthorized access vulnerability in the frontend of Smartstone Online Training and Learning...

Quantopian: Cross-site scripting via hardcoded front-end watched expression.

Hello, favorite security team. This is so far most interesting XSS i've found on your website. And also this is 10th bug i report you, so im gonna celebrate. Summary: Via hardcoded front-end code in algo debugger one is able to execute XSS on algorithm collaborator. One is able to use python to...

UBUNTU-CVE-2019-15767

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmdload function in frontend/cmd.cc via a crafted chess position in an EPD file...

GNU Chess Stack Buffer Overflow Vulnerability

GNU Chess is a chess game program. A stack buffer overflow vulnerability exists in the cmdload function in frontend/cmd.cc in GNU Chess 6.2.5. An attacker can exploit this vulnerability to cause a stack buffer overflow via a specially crafted chess position in an EPD file...

XSS Vulnerability at ZMCMS Frontend Application Information

ZMCMS is a website construction system of Sichuan Zhimeng Technology Co. An XSS vulnerability exists in the ZMCMS front-end application data, which can be exploited by attackers to obtain sensitive information...

ceph: Unauthenticated clients can crash ceph RGW configured with beast as frontend

A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients...