CVE-2020-3938

CVE-2020-3938 affects SysJust Syuan-Gu-Da-Shih versions before 20191223 and is described as a Request Forgery vulnerability that lets an attacker perform forged inquests to query the server’s network architecture or system files. The description does not specify affected product variants beyond t...

Please don’t buy this: smart doorbells

Though Black Friday and Cyber Monday are over, the two shopping holidays were just precursors to the larger Christmas season—a time of year when online packages pile high on doorsteps and front porches around the world. According to some companies, it's only logical to want to protect these...

QEMU: scsi-generic: possible OOB access while handling inquiry request

In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...

QEMU: scsi-generic: possible OOB access while handling inquiry request

In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...

QEMU: scsi-generic: possible OOB access while handling inquiry request

In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...

Cross-Site Scripting

Overview Versions of keystone prior to 4.0.0 are vulnerable to Cross-Site Scripting XSS. The package fails to sanitize user input on the Contact Us page, allowing attackers to submit contact forms with malicious JavaScript in the message field. The output is not properly encoded leading an admin...

CVE-2019-11518

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

Congress Asks Google 10 Questions On Its Location Tracking Database

U.S. Congress has sent an open letter to Google CEO Sundar Pichai asking for more information about its Sensorvault database that's reportedly being used by law enforcement agencies to solve crime cases. Last week, we reported a story based upon NY Times findings that revealed how using a...

DEBIAN-CVE-2019-6501

In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...

CVE-2019-6501

CVE-2019-6501 affects QEMU 3.1, where scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c can perform out-of-bounds memory writes/reads. This could allow memory corruption within the QEMU process. The Initial Description provides no explicit details on vulnerable versions beyond QEMU 3.1, nor any...

WSTMart Product Inquiry Component Cross-Site Scripting Vulnerability

WSTMart is a set of e-commerce system of Guangzhou Shangtao Information Technology Co. A cross-site scripting vulnerability exists in the product consultation component of WSTMart version 2.0.8181212, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help ...

How to allocate Citrix licenses on My Account

This article describes how to allocate a Citrix Licenses on a Citrix portal Note: If a customer calls regarding cloud license allocation, inquire whether they are trying to allocate licenses between multi-tenants within the same Org ID or transfer licenses from one Org ID to another. If they are...

CVE-2018-7987

There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171C00. The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause...

Double free

In Snapdragon Mobile, Wear in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 835, SnapdragonHighMed2016, a double free of...

Threat Outbreak Alert RuleID33039: Email Messages Distributing Malicious Software on June 22, 2018

Medium Alert ID: 58273 First Published: 2018 June 22 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33039 may contain the following files: Name | Siz...

Security Bulletin: Incorrect saved channel status enquiry could cause denial of service for IBM MQ (CVE-2017-1236)

Summary IBM MQ could allow an authenticated user to potentially cause a denial of service by issuing an incorrect saved channel status inquiry. Vulnerability Details CVEID: CVE-2017-1236 DESCRIPTION: IBM MQ could allow an authenticated user to potentially cause a denial of service by saving an...

Threat Outbreak Alert RuleID32627: Email Messages Distributing Malicious Software on April 27, 2018

Medium Alert ID: 57623 First Published: 2018 May 1 11:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32627 may contain the following files: Name| Size i...

Threat Outbreak Alert RuleID32559: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57581 First Published: 2018 April 26 17:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32559 may contain the following files: Name | Si...

SQL Injection Vulnerability in Chiayi County's Management Resources Inquiry System

The Kiawah County Management Information System is a content management system. Chiayi County Management Information Query System suffers from SQL injection vulnerability, which can be exploited by attackers to access or modify sensitive database information...

afrindex.com XSS vulnerability

Open Bug Bounty ID: OBB-465869 Description| Value ---|--- Affected Website:| afrindex.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...