crm.speranzalogistics.com Cross Site Scripting vulnerability OBB-2484772

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Phishing Campaign Targeted Those Aiding Ukraine Refugees

Cyberattackers used a compromised Ukrainian military email address to phish EU government employees who’ve been involved in managing the logistics of refugees fleeing Ukraine, according to a new report. Ukraine has been at the center of an unprecedented wave of cyberattacks in recent weeks and...

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

Sourcecodester Logistic Hub Parcel Management System SQL注入漏洞

Sourcecodester Logistic Hub Parcel Management System is a simple web-based application project whose main purpose is to provide an automated platform for logistics centers to manage and track parcel records. A SQL injection vulnerability exists in Sourcecodester Logistic Hub Parcel Management...

Logistics giant D.W. Morgan exposed 100 GB worth of clients’ data

By Waqas The clients affected by the incident include Global 500 company Ericsson and Fortune 500 company Cisco. This is a post from HackRead.com Read the original post: Logistics giant D.W. Morgan exposed 100 GB worth of clients data...

Logistics giant warns of scams following ransomware attack

German logistics giant Hellmann Worldwide Logistics has issued a warning that data was stolen from the company when it was hit with a ransomware attack on December 9, 2021. It is not entirely clear what type of data was extracted, but the company says it is warning partners and customers to doubl...

Security feature bypass

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious...

CVE-2021-38178

CVE-2021-38178 affects SAP NetWeaver AS ABAP and ABAP Platform versions 700–756. The vulnerability allows a malicious user to transfer ABAP code artifacts or content by bypassing the established quality gates, enabling code to reach quality and production and potentially compromising confidential...

Shaanxi Touyouyou Supply Chain Management Co. Touyoupass has unauthorized access vulnerability

Ltd. is a high-tech enterprise specializing in the research and development, production and sales of end-of-logistics products, and providing industry solutions and implementation services as a whole. Ltd. Touyuyu Tong unauthorized access vulnerability, attackers can use the vulnerability to obta...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System (CNVD-2021-50629)

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...

SQL Injection Vulnerability in Chengdu Zero Takeoff Network Customer Management CRM System

Customer management CRM system is zero takeoff network development, based on the GPLv3 protocol release, for small and medium-sized management activities, to provide customer relationship management CRM, sales and marketing inventory JXC, human resources HRM, logistics office supplies, fixed...

Vulnerabilities in Weapons Systems

"If you think any of these systems are going to work as expected in wartime, youre fooling yourself." That was Bruces response at a conference hosted by US Transportation Command in 2017, after learning that their computerized logistical systems were mostly unclassified and on the Internet. That...

Logistics giant exposes customer data, Lolz at researchers when alerted

By Habiba Rashid At the time of publishing this article; the data belonging to Bergen Logistics was available for public access without any security authentication. This is a post from HackRead.com Read the original post: Logistics giant exposes customer data, Lolz at researchers when alerted...

Kingtrans Logistics Management System suffers from SQL Injection Vulnerability

Ltd. is a company mainly engaged in the technical development and sales of computer software and hardware; network technology development excluding Internet access services; computer system integration, technology development in the field of information technology, technology consulting and other...

Ransomware Attack Creates Dutch Cheese Shortages

An Easter weekend ransomware attack on a food-logistics firm in the Netherlands has caused shortages of prepackaged cheese in supermarkets across the country. The largest Dutch grocery store chain had some bad news for a cheese-mad nation. “Due to a technical malfunction, there is limited...

SQL Injection Vulnerability in Order Management System of Baojian Logistics Enterprise Group Co.

Ltd. is the earliest professional third-party logistics enterprise in China to provide customers with integrated logistics services by applying modern logistics concepts. There is a SQL injection vulnerability in the order management system of Baoshuai Logistics Enterprise Group, which can be...

SQL Injection Vulnerability in Dongsheng Logistics Software (CNVD-2021-11043)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Dongsheng Logistics Software, which...

SQL Injection Vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2021-08484)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Qingdao Dongsheng Weiye Software Co...

SQL Injection Vulnerability in Dongsheng Logistics Software of Qingdao Dongsheng Weiye Software Co. Ltd (CNVD-2021-08485)

Qingdao Dongsheng Weiye Software Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform and logistics software. A SQL injection vulnerability exists in Qingdao Dongsheng Weiye Software Co...

Qingdao Dongsheng Weiye Software Co., Ltd. information leakage vulnerability in Dongsheng logistics software

Qingdao Dongsheng Weiye Software Technology Co., Ltd. was founded in November 2004, the company's main business expanded into three major segments, namely, logistics consulting, logistics information platform, logistics software. There is an information leakage vulnerability in Qingdao Dongsheng...