JeecgBoot SQL Injection Vulnerability

JeecgBoot is a Java low-code platform for enterprise Web applications in China. A SQL injection vulnerability exists in JeecgBoot version 3.0, which stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to...

Siemens Mendix incorrect authorization vulnerability

Siemens Mendix is a low-code application development platform from Siemens, a German company that provides application development, testing, deployment and iteration. The platform provides application development, testing, deployment and iteration. Siemens Mendix contains a security vulnerability...

Siemens Mendix Information Disclosure Vulnerability

A security vulnerability exists in Siemens Mendix, a low-code application development platform from Siemens, Germany. The vulnerability stems from the fact that applications built with the affected version of Mendix Studio Pro do not prevent the caching of file documents when opening or downloadi...

Siemens Mendix Access Check Bypass Vulnerability

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment and iteration. A security vulnerability exists in Siemens Mendix, which can be exploited by an attacker to bypass write access checks on properties of the...

Siemens Mendix 安全漏洞

Siemens Mendix is a low-code application development platform from Siemens. The platform provides application development, testing, deployment and iteration. A security vulnerability exists in Siemens Mendix, which can be exploited by an attacker to bypass write access checks on properties of the...

SQL Injection Vulnerability in Jeecg Boot of Beijing Guo Torch Information Technology Co.

Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in Jeecg Boot, which can be exploited by an attacker to obtain sensitive database information...

Microsoft Teams: Very Bad Tabs Could Have Led to BEC

Attackers could have stepped through a yawning security hole in the Microsoft Teams chat service that would have let them masquerade as a targeted company’s employee, by reading and sending email on their behalf. On Monday, Tenable’s Evan Grant explained in a post that he found the bug in Microso...

CVE-2021-28648

Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 Consumer is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an...

CVE-2021-21298

Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the Projects API. If the Projects feature is enabled, a user with projects.read permission is able to access any file via t...

Recent enhancements for Microsoft Power Platform governance

An emerging trend in digital transformation efforts has been the rise of low-code development platforms. Of course, these low-code platforms must be grounded in best-of-breed governance capabilities which include security and compliance features. Without strong governance, the full benefits of...

Recent enhancements for Microsoft Power Platform governance

An emerging trend in digital transformation efforts has been the rise of low-code development platforms. Of course, these low-code platforms must be grounded in best-of-breed governance capabilities which include security and compliance features. Without strong governance, the full benefits of...

Beijing Guo Torch Information Technology Co. jeecg-boot suffers from SQL injection vulnerability (CNVD-2020-59430)

JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in Beijing Guo Torch Information Technology Co. jeecg-boot, which can be exploited by an attacker to obtain sensitive information from a database...

Beijing Guo Torch Information Technology Co. jeecg-boot suffers from SQL injection vulnerability (CNVD-2020-59429)

JeecgBoot is a low-code BPM-based platform. A SQL injection vulnerability exists in Beijing Guo Torch Information Technology Co. jeecg-boot, which can be exploited by an attacker to obtain sensitive information from a database...