Weak Password Vulnerability in RG-EG Easy Gateway Web Management System

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A weak password vulnerability exists in the RG-EG Easy Gateway web management system, which can be exploited by attackers to obtain...

django: potential SQL injection via "tolerance" parameter in GIS functions and aggregates on Oracle

A SQL-injection flaw was found in python-django, where GIS functions and aggregates in Oracle did not correctly neutralize tolerance-parameter data. A remote attacker could use this flaw to submit crafted data to inject malicious SQL...

CVE-2021-3506

An out-of-bounds OOB memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this...

Information Leakage Vulnerability in the Employment Information Management System of Chengdu EKS Information Industry Co.

Chengdu EKS Information Industry Co., Ltd. is an intelligent card series product solution provider integrating software and hardware product design, development, production, sales, installation and service. An information leakage vulnerability exists in the employment information management syste...

Buffer Overflow Vulnerabilities in Various Esri Products

ESRI ArcGIS Enterprise and so on are the products of the U.S. Environmental Systems Research Institute ESRI, Inc. ArcGIS Enterprise is a set of GIS geographic information system basic software system. Esri Arcgis Server and so on are the products of the U.S. Esri Esri, Inc. Server is a Web-orient...

Buffer Overflow Vulnerability in Various Esri Products (CNVD-2021-39523)

ESRI ArcGIS Enterprise and others are products of Environmental Systems Research Institute ESRI, Inc.ArcGIS Enterprise is a GIS Geographic Information System base software system.Esri Arcgis Server is a Web-oriented enterprise software platform that can be used to provide geolocation services. Es...

Red Sail iOffice has a logic flaw vulnerability

Red sail iOffice system is a based on Microsoft .NET technology research and development, the establishment of notebook, cell phone and other convenient terminal as a carrier to realize the mobile information system. ioffice OA system involves hospitals, government, military industry, group...

Logic Flaw Vulnerability in RSR Routers at Riptide Networks, Inc.

Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other items. A logic flaw vulnerability exists in the RSR router of Ruijie Networks Corporation, which can be exploited by an attacker to...

Hebei Hershot Technology Co., Ltd. one card information integrated management platform there are SQL injection vulnerabilities

The business scope of Hebei Hershot Technology Co., Ltd. includes: computer software development, information system integration services; repair of specialized equipment and so on. Hebei Heshuo Technology Co., Ltd. card information integrated management platform there is a SQL injection...

SQL Injection Vulnerability in Jiecheng Retail Management Information System

O-Net is an innovative enterprise that provides fully integrated information system solutions and cloud services for retail enterprises with software development as its core, and is a leading provider of full-service, integrated solutions for the retail industry in China. A SQL injection...

Undermining Democracy

Last Thursday, Rudy Giuliani, a Trump campaign lawyer, alleged a widespread voting conspiracy involving Venezuela, Cuba, and China. Another lawyer, Sidney Powell, argued that Mr. Trump won in a landslide, the entire election in swing states should be overturned and the legislatures should make su...

OS4Ed openSIS id parameter multiple SQL injection vulnerabilities

Summary Multiple exploitable SQL injection vulnerabilities exist in the ID parameters of OS4Ed openSIS 7.3 pages. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Tested Versions OS4Ed openSIS 7.3...

OS4Ed openSIS course_period_id parameter multiple SQL injection vulnerabilities

Summary Multiple exploitable SQL injection vulnerabilities exist in the courseperiodid parameters used in OS4Ed openSIS 7.3 pages. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated HTTP request to trigger these vulnerabilities. Tested Versions OS4Ed...

OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability

Talos Vulnerability Report TALOS-2020-1072 OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability August 31, 2020 CVE Number CVE-2020-6117,CVE-2020-6119,CVE-2020-6121,CVE-2020-6118,CVE-2020-6120,CVE-2020-6122 SUMMARY Multiple exploitable SQL injection vulnerabilities exist in th...

CVE-2020-13278

Reflected Cross-Site Scripting vulnerability in Modules.php in RosarioSIS Student Information System 6.5.1 allows remote attackers to execute arbitrary web script via embedding javascript or HTML tags in a GET request...

CVE-2020-13278

CVE-2020-13278 is a reflected XSS vulnerability in RosarioSIS, specifically in Modules.php for RosarioSIS Student Information System versions prior to 6.5.1. The issue allows remote attackers to inject and execute arbitrary JavaScript/HTML via a GET parameter, potentially compromising user sessio...

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary messages within the AI system.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to read arbitrary messages within the AI system remotely...

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to read arbitrary files on the AIIS server.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files on the AIIS server using a specially created...

The vulnerability of the automated information system “Web-Torghi KS” arises from the lack of measures taken to protect the structure of the web page. This allows attackers to upload arbitrary files onto the AIIS server.

The vulnerability of the automated information system “Web-Torghi KS” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to upload arbitrary files to the AIIS server using a specially created POST request...

SQL Injection Vulnerability in Hefei Blue Collar Business Information Co.

Hefei Blue Collar Business Information Co., Ltd. is a company that focuses on researching the combination of website Baidu optimization, Internet marketing, and website construction. Hefei Blue Collar Business Information Co., Ltd. website building system has a SQL injection vulnerability, which...