Intelligent Security System SecurOS Enterprise 10.2 - SecurosCtrlService Unquoted Service Path

Intelligent Security System SecurOS Enterprise 10.2 - SecurosCtrlService Unquoted Service Path Exploit Title: Intelligent Security System SecurOS Enterprise 10.2 - 'SecurosCtrlService' Unquoted Service Path Discovery Date: 2019-10-28 Exploit Author: Alberto Vargas Vendor Homepage:...

SQL injection vulnerability in D***t.aspx page of enterprise application management platform of Shanghai SAMS Software Co.

Sanmeng enterprise application management platform meets users' needs to realize all kinds of document management, office automation and all kinds of business management, such as file management, contract management, project document management, notice and announcement, receipt and dispatch of...

AVCON6 Systems Management Platform RCE Vulnerability

AVCON6 Systems Management Platform is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AVCON6 Systems Management Platform Detection

Detection of AVCON6 Systems Management Platform. The script sends a connection request to the server and attempts to detect AVCON6 Systems Management Platform. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

AVCON6 Systems Management Platform Remote Root

Exploit Title: AVCON6 systems management platform - OGNL - Remote root command execution Date: 10/09/2018 Exploit Author: Nassim Asrir Contact: [email protected] | https://www.linkedin.com/in/nassim-asrir-b73a57122/ CVE: N\A Tested On: Windows 1064bit / 61.0b12 64-bit Thanks to: Otmane Aarab...

SQL Injection Vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated Management Platform

Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is a SQL injection vulnerability in Yinda Hui Zhi Anshu Yi Intelligent Integrated Management...

Important: Red Hat Security Advisory: ceph security update

An update is now available for Red Hat Ceph Storage 3.3 on Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Information Leakage Vulnerability in Zhenyun Technology's HAND SRM System

Zhen Yun Technology HAND SRM system is a one-stop digital management platform based on SaaS service/technology architecture. An information leakage vulnerability exists in Zhen Yun Technology HAND SRM System, which can be exploited by attackers to obtain sensitive information...

Rancher Labs Rancher Unspecified Vulnerability

Rancher Labs Rancher is the United States Rancher Labs, Inc. of a set of open source enterprise-class container management platform. Rancher Labs Rancher has a security vulnerability that originates from a default administrator account with a default password created by the program when it is fir...

Information leakage vulnerability in the Information Management Platform for Immunization Planning system

Ltd. is a professional technical service company focusing on the informationization construction of domestic disease prevention and control centers and health administrative institutions at all levels. An information leakage vulnerability exists in the immunization planning information management...

SQL Injection, Unauthorized Access Vulnerabilities in Hee Haw Health Management Platform

Ltd. developed a set of dedicated health management service platform, the application field for the medical field, health management industry. SQL injection and unauthorized access vulnerabilities exist in Xiho Health Management Platform. An attacker can exploit the vulnerability to access the...

CVE-2019-5356

A remote code execution vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

Talent green card information management platform has xss vulnerability

Shijiazhuang Development Zone YINET Technology Development Co., Ltd. is a company mainly engaged in network engineering, management information system development; information technology consulting services; information system integration services and other projects. The Talent Green Card...

[SECURITY] Fedora 30 Update: drupal8-8.6.15-1.fc30

Drupal is an open source content management platform powering millions of websites and applications. It=EF=BF=BD=EF=BF=BD=EF=BF=BDs built, used, and supported by an active and diverse community of people around the world...

Guangzhou Redfan Technology Co., Ltd OA information management platform residual page exists xss vulnerability

iOffice.net is the information management platform developed by Redfan Technology based on the latest technology of Microsoft . Guangzhou red sail science and technology limited company OA information management platform residual page exists xss loophole, the attacker can use the loophole to inse...

RHEL 7 : Red Hat Ceph Storage 2.5 (RHSA-2019:0747)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0747 advisory. Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable version of the Ceph storage system with a...

SQL Injection Vulnerability in Lo***.aspx Page of Integrated Water Supply Management Platform

Wuhan Jinshuilai Technology Development Co., Ltd. is a high-tech enterprise specializing in water management informationization, automation and intelligent construction. There is a SQL injection vulnerability in the Lo.aspx page of the integrated water management platform, which can be exploited ...

Command Execution Vulnerability in China Telecom's Smart Gateway Management Platform

China Telecom Group Corporation is a large state-owned communications enterprise in China, a global partner of Shanghai World Expo, and one of the "World's Top 500 Enterprises" for many years in a row. It mainly operates integrated information services such as fixed-line telephony, mobile...

Code injection

Receipt of a specially crafted IPv6 exception packet may be able to trigger a kernel crash vmcore, causing the device to reboot. The issue is specific to the processing of Broadband Edge BBE client route processing on MX Series subscriber management platforms, introduced by the Tomcat Next...

Universal Password Login Vulnerability in All-Media Content Management and Business Support Platform of Beijing Jingwei Zhongtian Information Technology Co.

Beijing Jingwei Zhongtian Information Technology Co., Ltd. is a high-tech enterprise specializing in software development and services related to network audio-visual content management and applications. A universal password login vulnerability exists in the all-media content management and...