SQL Injection Vulnerability in Website Building System of Wuhan Bajie Group Information Technology Co.

Wuhan Bajie Group Information Technology Co., Ltd. is a company that provides integrated solutions of development, operation, training and promotion for enterprises. There is a SQL injection vulnerability in the website building system of Wuhan Bajie Group Information Technology Co., Ltd, which c...

Xuzhou Mengchuang Information Technology Co., Ltd. website building system has file upload vulnerability

Vlcms is subordinate to Xuzhou Mengchuang Information Technology Co., Ltd. and Jiangsu Vlcms Network Technology Co., Ltd. and has been focusing on providing technical products and services in the game industry for 9 years, providing professional and scalable game operation technical solutions for...

SQL Injection Vulnerability in United Seat Management System

Hangzhou Lianchuang Information Technology Co., Ltd. is mainly engaged in library self-service, space service, intelligent library construction product development and service. SQL injection vulnerability exists in Lianchuang Seat Management System. An attacker can exploit the vulnerability to...

JXCMS suffers from SQL injection vulnerability

Jingxun CMS is an efficient and safe website construction and management system independently developed by Taizhou Jingxun Information Technology Co. JXCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain database information...

Unauthorized Access Vulnerability in Communication Module CLM920_NC5 of Shanghai Haige Information Technology Co.

Ltd. is engaged in the research, development, production and operation of 3G/3.75G/4G/NB communication module, which is a communication module company with a patch production factory. An unauthorized access vulnerability exists in communication module CLM920NC5 of Shanghai Haige Information...

PHPwind v9.1.0 - Multiple Cross Site Scripting Vulnerabilities

Document Title: =============== PHPwind v9.1.0 - Multiple Cross Site Scripting Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2184 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-13472 CVE-ID: ======= CVE-2019-13472 Release Dat...

Quest KACE Systems Management Appliance

1. EXECUTIVE SUMMARY CVSS v3 2.7 ATTENTION : Exploitable remotely/low skill level to exploit Vendor : Quest Equipment : KACE Systems Management Appliance SMA Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an administrative...

Feds: Cyberattack on NASA's JPL Threatened Mission-Control Data

NASA’s Jet Propulsion Laboratory JPL may know how to send delicate equipment to Mars, but basic cybersecurity best practices appear to pose an issue for it. A comprehensive federal review has detailed an April 2018 security incident that compromised mission systems – stemming from multiple IT...

Cynet Free Visibility Experience – Unmatched Insight into IT Assets and Activities

Real-time visibility into IT assets and activities introduces speed and efficiency to many critical productivity and security tasks organizations are struggling with—from conventional asset inventory reporting to proactive elimination of exposed attack surfaces. However, gaining such visibility i...

Dell KACE System Management Appliance (SMA) XSS / SQL Injection

Exploit Title: Dell Kace Appliance Multiple Vulnerabilities Date: 12/04/2018 Exploit Author: SlidingWindow, Twitter: @kapilkhot Vendor Homepage: https://www.quest.com/products/kace-systems-management-appliance/ Affected Versions: KACE SMA versions prior to 9.0.270 PATCH SEC201820180410 Tested on:...

KACE System Management Appliance (SMA) < 9.0.270 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Dell Kace Appliance Multiple Vulnerabilities Exploit Author: SlidingWindow, Twitter: @kapilkhot Vendor Homepage: https://www.quest.com/products/kace-systems-management-appliance/ Affected Versions: KACE SMA versions prior to...

SQL Injection Vulnerability in Xi'an Blue Coast Information Technology Co.

Xi'an Blue Coast Information Technology Ltd. is a professional website construction company. Xi'an Blue Coast Information Technology Co., Ltd. website building system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Binary vulnerability in the information technology examination practice system of Shincao Middle School

Xinkao Middle School Information Technology Exam Practice System is an information technology exam practice system developed by Jinan Kaoyuan Information Technology Co. There is a binary vulnerability in Xinkao Middle School Information Technology Exam Practice System that can be exploited by...

SQL Injection Vulnerability in Zhuhai Goling Information Air Quality Online Monitoring System

Zhuhai Goling Information Technology Co., Ltd. is a national high-tech enterprise specializing in the research and development, system integration, production, sales and technical services of network information security equipment, special communication equipment, ecological environment monitorin...

Binary vulnerability in the Information Technology Exam Practice System for Shincao Middle Schools (Middle Schools in Shandong Province)

Xinkao Middle School Information Technology Exam Practice System is an information technology exam practice system developed by Jinan Kaoyuan Information Technology Co. A binary vulnerability exists in Xinkao Middle School Information Technology Exam Practice System Middle School in Shandong...

i4 assistant cross-site scripting vulnerability

i4 assistant is a specialized management tool for Apple mobile devices from China for Aipu Information Technology Company. A cross-site scripting vulnerability exists in i4 assistant version 7.85. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via th...

Cisco Patches Critical Bug in License Management Tool

Cisco Systems is warning of a critical bug in two of its license management tools that could allow an unauthenticated remote attacker to execute arbitrary queries. A successful attack could allow for an attacker to modify and delete random data in Cisco product lifecycle management applications...

Arbitrary File Upload Vulnerability in Metadata Platform (MetaCube) of Puyuan Information Technology Co.

Metadata Platform MetaCube of Puyuan Information Technology Co., Ltd. is a tool support for enterprises to establish metadata management system. An arbitrary file upload vulnerability exists in the MetaCube platform of Puyuan Information Technology Co. An attacker can exploit the vulnerability to...

Login Bypass Vulnerability in Metadata Platform (MetaCube) of Puyuan Information Technology Co.

Metadata Platform MetaCube of Puyuan Information Technology Co., Ltd. is a tool support for enterprises to establish metadata management system. A login bypass vulnerability exists in the metadata platform MetaCube of Puyuan Information Technology Co. An attacker can exploit the vulnerability to...

How to Start a Career in Cybersecurity: All You Need to Know

Cybersecurity is one of the most dynamic and exciting fields in tech, combining cutting-edge information technology with crime fighting. It's also an industry in serious need of qualified professionals. Estimates show that there are over one million unfilled cybersecurity jobs. The U.S. Bureau of...