DEA Investigating Breach of Law Enforcement Data Portal

The U.S. Drug Enforcement Administration DEA says it is investigating reports that hackers gained unauthorized access to an agency portal that taps into 16 different federal law enforcement databases. KrebsOnSecurity has learned the alleged compromise is tied to a cybercrime and online harassment...

kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() in net/bluetooth/hci_event.c

A flaw out of bounds memory access in the Linux kernel bluetooth subsystem was found in the way when some data being read about the bluetooth device with the hciextendedinquiryresultevt call. A local user could use this flaw to crash the system or read some data out of memory bounds that can lead...

kernel: slab out-of-bounds read in hci_extended_inquiry_result_evt() in net/bluetooth/hci_event.c

A flaw out of bounds memory access in the Linux kernel bluetooth subsystem was found in the way when some data being read about the bluetooth device with the hciextendedinquiryresultevt call. A local user could use this flaw to crash the system or read some data out of memory bounds that can lead...

Information leakage vulnerability in payroll inquiry system

Payroll Enquiry System is a payroll inquiry system. The Payroll Inquiry System has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Payroll Inquiry System

Payroll Enquiry System is an application. An unauthorized access vulnerability exists in the Payroll Inquiry System, which can be exploited by an attacker to access specific files, jump to the backend, and view information such as the ID number of an active employee...

SUSE: Security Advisory (SUSE-SU-2012:1205-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2020-36386

An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hcievent.c has a slab out-of-bounds read in hciextendedinquiryresultevt, aka CID-51c19bf3d5cf...

CVE-2020-15188

SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution RCE. The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed...

CVE-2020-15188

SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution RCE. The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed...

Remote code execution

SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution RCE. The allows remote attackers to execute any arbitrary code when the inquiry form feature is enabled by the service. The vulnerability is caused by unserializing the form without any restrictions. This was fixed...

CVE-2020-15182

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

CVE-2020-15182

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

Cross site request forgery (csrf)

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

CVE-2020-15182

CVE-2020-15182 affects the SOY Inquiry component in SOY CMS (versions ≤ 2.0.0.3). The issue combines CSRF with Remote Code Execution, allowing a logged-in administrator to be forced to edit files when visiting a crafted page. Remediation is to upgrade to SOY Inquiry 2.0.0.4 and SOY CMS 3.0.2.328....

CVE-2020-15182 Cross-site Request Forgery leading to RCE in SOY CMS

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

credit-card-inquiry.com Cross Site Scripting vulnerability OBB-1273538

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL Injection Vulnerability in Supplier Inquiry System of Shanghai Haidian Software Co.

Vendor inquiry system is based on VMI management ideas, sharing the enterprise's operational business data with suppliers, instantly controlling the sales information and inventory levels as a solution for market demand forecasting and inventory replenishment. A SQL injection vulnerability exists...

SQL Injection Vulnerability in Supplier Inquiry System Co***.aspx Page

Shanghai Haidian Software Co., Ltd. is a provider of informatization solutions focusing on the pharmaceutical distribution industry. A SQL injection vulnerability exists in the Co.aspx page of the supplier query system, which can be exploited by an attacker to obtain sensitive information from th...

Vendor Inquiry System of Shanghai Haidian Software Co.

Shanghai Haidian Software Co., Ltd. is a provider of informatization solutions focusing on the pharmaceutical distribution industry. A universal password login vulnerability exists in the supplier query system of Shanghai Haidian Software Co., Ltd. that can be exploited by attackers to obtain...

Heap overflow

An issue was discovered in the Bluetooth component of the Cypress formerly owned by Broadcom Wireless IoT codebase. Extended Inquiry Responses EIRs are improperly handled, which causes a heap-based buffer overflow during device inquiry. This overflow can be used to overwrite existing functions wi...