CVE-2020-18699

CVE-2020-18699 describes a Cross Site Scripting (XSS) issue in Lin-CMS-Flask v0.1.1. The vulnerability is triggered via input in the Username parameter of the component path app/api/cms/user.py, allowing remote attackers to execute arbitrary code within the context of the affected application. Th...

CVE-2020-18699

Cross Site Scripting XSS in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'...

CVE-2020-18698

Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'...

CVE-2020-18698

The CVE-2020-18698 entry concerns Lin-CMS-Flask v0.1.1 with an improper authentication flaw in the login path (component app/api/cms/user.py). The vulnerability enables remote brute-force login attempts without restriction. NVD/mitigations indicate an extremely high impact under CVSS-3.1: User au...

lin-cms-flask安全漏洞

lin-cms-flask is a content management system framework. lin-cms-flask version 0.1.1 contains a security vulnerability that can be exploited by remote attackers to brute force login via the "login" function in the component "app/api/cms/user.py"...

TaleLin Lin-CMS-Flask 访问控制错误漏洞

TaleLin Lin-CMS-Flask is a content management system framework. an access control error vulnerability exists in TaleLin Lin-CMS-Flask, stemming from incorrect access control in Lin-CMS-Flask v0.1.1, which could be exploited by an attacker to obtain sensitive information and/or because the...

PT-2021-10215 · Unknown · Lin-Cms-Flask

Name of the Vulnerable Software and Affected Versions: Lin-CMS-Flask version 0.1.1 Description: The issue allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying...

PT-2021-10213 · Unknown · Lin-Cms-Flask

Name of the Vulnerable Software and Affected Versions: Lin-CMS-Flask version 0.1.1 Description: The issue allows remote attackers to launch brute force login attempts without restriction via the login function in the component app/api/cms/user.py. This enables attackers to attempt multiple logins...

Jinan Bo Lin Network Technology Co., Ltd. website building system ne*** page SQL injection vulnerability

Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...

Jinan Bo Lin Network Technology Co., Ltd. website building system ab*** page SQL injection vulnerability

Jinan Bo Lin Network Technology Co., Ltd. is a provide Jinan website construction, Jinan website production, Jinan web design, Jinan website design, Jinan website optimization, website maintenance, website revision, domain name space, 400 phone, store marketing and other Internet business Jinan...

lin-coln.com Cross Site Scripting vulnerability OBB-1297143

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Reverse Engineering Tesla Hardware

TL;DR How does the Tesla Model S update its firmware? What did we find when reverse engineering the display and instrument cluster? Here’s the result of a couple of weeks work, working on a real vehicle that mostly worked after we had finished. Part 1: analysing the hardware, complete with a 14...

FBI Arrests A Cyberstalker After Shady "No-Logs" VPN Provider Shared User Logs

FBI recently arrested a psycho cyber stalker with the help of a popular VPN service and this case apparently exposed the company's lies about the "no logs" policy. Taking down cyber stalkers and criminals is definitely a good thing, and the FBI has truly done a great job, but the VPN company whos...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2014-6975

The Twin Lin aka com.twinlin.twmo application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Twin Lin aka com.twinlin.twmo application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6975

The Twin Lin aka com.twinlin.twmo application 5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6975

The CVE-2014-6975 entry concerns the Twin Lin (com.twinlin.twmo) Android app version 5, which fails to verify X.509 certificates when connecting to SSL servers. This improper validation enables MITM attackers to spoof servers and access sensitive data via a crafted certificate. The provided conne...

CentOS Update for kernel CESA-2012:1304 centos6

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2012:1304 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Internet Explorer Same ID Property Deleted Object Handling Memory Corruption

Exploit for windows platform in category remote exploits MS12-037 Internet Explorer Same ID Property Deleted Object Handling Memory Corruption This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for mor...