975 matches found
Shenzhen good business network studio Hsycms file upload vulnerability
Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Shenzhen Good Business Network Studio Hsycms has a file upload vulnerability that can be exploited by attackers to gain control o...
Becoming resilient by understanding cybersecurity risks: Part 2
In part one of this blog series, we looked at how being resilient to cybersecurity threats is about understanding and managing the organizational impact from the evolution of human conflict that has existed since the dawn of humanity. In part two of this series, we further explore the imperative ...
CVE-2020-27481
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...
CVE-2020-27481
Good Layers LMS Plugin
Wordpress Plugin Good LMS 2.1.4 - 'id' Unauthenticated SQL Injection
Exploit Title: Wordpress Plugin Good LMS 2.1.4 - 'id' Unauthenticated SQL Injection Software Link: https://codecanyon.net/item/good-lms-learning-management-system-wp-plugin/9033850 Version: prefix . 'gdlrpayment '; 688- $sql .= 'WHERE id=' . $POST'id' . ' AND '; 689- $sql .=...
Good LMS < 2.1.5 - Unauthenticated SQL Injection
The Good LMS WordPress plugin was vulnerable to Unauthenticated SQL Injection in its 'id' parameter of the gdlrlmscancelbooking action. POST /wp-admin/admin-ajax.php HTTP/1.1 action=gdlrlmscancelbooking&id=SELECT 1337 FROM SELECTSLEEP10MrMV...
SAP Process Integration Information Disclosure Vulnerability
SAP Process Integration is SAP's Enterprise Application Integration EAI software for seamless integration between SAP and non-SAP applications in a company or with systems external to the company. An information disclosure vulnerability exists in SAP Process Integration 1.0. An attacker could...
ajougoodhospital.co.kr Cross Site Scripting vulnerability OBB-1440828
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Cybersecurity Visuals
The Hewlett Foundation just announced its top five ideas in its Cybersecurity Visuals Challenge. The problem Hewlett is trying to solve is the dearth of good visuals for cybersecurity. A Google Images Search demonstrates the problem: locks, fingerprints, hands on laptops, scary looking hackers in...
VulnCheck KEV: CVE-2020-27481
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query...
New Privacy Features in iOS 14
A good rundown...
goodfoodstories.com Improper Access Control vulnerability OBB-1378741
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
good-host.net Cross Site Scripting vulnerability OBB-1359148
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
good-chem.com Cross Site Scripting vulnerability OBB-1286381
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Security Awareness is as valuable today as ever
A while ago I saw a tweet that initially angered me for many reasons, but then I thought about it and wondered how much effort do companies put in to awareness and training. The tweet was: Security awareness is overrated. You got to do it, but dont expect users not clicking on phishing mails agai...
thegoodwineshop.co.uk Cross Site Scripting vulnerability OBB-1237999
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Good Time Coin Digital Error Vulnerability
Good Time Coin GTY is an ethereum-based digital currency.An integer overflow vulnerability exists in the 'mintToken' function of GTY's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...
good-lamps.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1152505 Security Researcher Teamhash Helped patch 382 vulnerabilities Received 3 Coordinated Disclosure badges Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affecting good-lamps.com website and...
good-lamps.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1147148 Security Researcher MrRain1996 Helped patch 1003 vulnerabilities Received 5 Coordinated Disclosure badges Received 9 recommendations , a holder of 5 badges for responsible and coordinated disclosure, found a security vulnerability affecting good-lamps.com website a...
good-lamps.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1125068 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...