North Korean Hackers Steal thousands of Military files from S. Korea

Hackers aligned with North Korea have always been accused of attacking and targeting South Korean organizations, financial institutions, banks and media outlets. Recent reports indicate that North Korean hackers have hacked into more than 140,000 computers of at least 160 South Korean government...

Multiple Vulnerabilities in HPE Matrix Operating Environment

HPE Matrix Operating Environment is a suite of cloud management software designed for infrastructure services. HPE Matrix Operating Environment has multiple security vulnerabilities that could be exploited by remote attackers to obtain sensitive information, execute arbitrary code, gain...

SQL Injection Vulnerability in UFIDA Software NC-IUFO System

UFIDA NC-IUFO system is a financial management software. The UFIDA NC-IUFO system suffers from a SQL injection vulnerability that can be exploited by an attacker to gain access to website database information...

OCS Inventory NG SQL Injection Vulnerability

OCS Inventory NG Open Computer and Software Inventory Next Generation is a system management software that helps administrators keep track of computer software installations and configurations, and enables low network traffic communication between HTTP proxies and servers. OCS Inventory NG suffer...

The vulnerability of the IBM Tivoli Storage Manager FastBack data management software allows a hacker to trigger a service failure.

The vulnerability of the IBM Tivoli Storage Manager FastBack data management program arises due to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the confidentiality of information.

The vulnerability of the Oracle Communications Convergence component of the Oracle Communications Applications software and network management suite is related to code errors. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information through...

用友 GRP-U8管理软件 /IMUnitServlet?pt=add&org_code=1 sql注入

No description provided by source...

用友 GRP-U8管理软件 /IMRoleServlet?pt=del&rolecode=1 sql注入

No description provided by source...

Manage Engine OPutils 8.0 Cross Site Request Forgery / Cross Site Scripting

================================================== CSRF and XsS In Manage Engine oputils ================================================== . contents:: Table Of Content Overview ======== Title : CSRF and XSS In Manage Engine OPutils Author: Kaustubh G. Padwad Plugin Homepage:...

ManageEngine OPutils 8.0 - Multiple Vulnerabilities

=================================================================================== Privilege escalation Vulnerability in ManageEngine oputils =================================================================================== Overview ======== Title:- Privilege escalation Vulnerability in...

The vulnerability of Oracle Communications Applications’ network management and organization software allows attackers to compromise the integrity, availability, and confidentiality of information.

The vulnerability of the Oracle Communications Applications’ network management and organization software component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to compromise the integrity, availability, and confidentiality of information by making...

kingdee EAS系统 V7.5 /plt_iservice/service/findFavList.action 远程命令执行漏洞

0x01 框架介绍 全球第一款融合TOGAF标准SOA架构的企业管理软件，金蝶EAS面向亟待跨越 成长鸿沟的大中型企业，以"创造无边界信息流"为产品设计理念， 支持云计算、SOA 和动态流程管理的整合技术平台，全面覆盖企业战略管理、风险管理、集团财务管 理、战略人力资源管理、跨组织供应链、多工厂制造和外部产业链等管理领域，突破 流程制造、项目制造、供应商协作、客户协作等复杂制造和产业链协同应用，实现业 务的全面管理，支持管理创新与发展，帮助企业敏捷应对日益复杂的商业环境变化， 提升整体运作效率，实现效益最大化。 官方主页：www.kingdee.com 0x02 漏洞细节...

Huawei LogCenter Denial of Service Vulnerability

Huawei LogCenter is a set of log management software from Huawei, China. A denial of service vulnerability exists in Huawei LogCenter. An attacker could exploit this vulnerability to cause the application to deny service to legitimate users...

CVE-2015-8247

CVE-2015-8247 is a reflected Cross‑Site Scripting (XSS) vulnerability in Synnefo Internet Management Software (IMS) 2015 affecting the synnefoclient. The issue arises in the packagehistory/listusagesdata endpoint via the plan_name parameter, enabling remote attackers to inject arbitrary script/HT...

PT-2015-7754

Name of the Vulnerable Software and Affected Versions Synnefo Internet Management Software IMS 2015 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the plan name parameter to the "packagehistory/listusagesdata" endpoint. This could...

CVE-2015-8247: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in synnefoclient in Synnefo Internet Management Software IMS 2015 allows remote attackers to inject arbitrary web script or HTML via the planname parameter to packagehistory/listusagesdata...

CVE-2015-6364

Cisco Videoscape Distribution Suite Service Manager REST API Information Disclosure (CVE-2015-6364) affects Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager. The root cause is improper validation of HTTP requests to the REST API, allowing an unau...

JVN#66984217: MATCHA INVOICE vulnerable to code injection

MATCHA INVOICE provided by ICZ Corporation is a web-based billing management software. MATCHA INVOICE contains a code injection CWE-94 vulnerability due to a flaw when configuring the database during installation. Impact An unauthenticated attacker who can execute the installer may execute...

ResourceSpace CMS 7.3.7009 SQL Injection Vulnerability

ResourceSpace CMS versions 7.3.7009 and below suffer from a remote SQL injection vulnerability. Title: Blind boolean sql injection vulnerability in ResourceSpace CMS Author: William F. Reyor III Contact: email protected Published: August 22 2015 Vendor: Montala Limited Vendor url:...

Cisco Videoscape Policy Resource Manager Denial of Service Vulnerability

Cisco Videoscape Policy Resource Manager is a suite of video service management software from Cisco. The software supports access to session, resource, and policy information across QAM and IP environments. A denial of service vulnerability exists in Cisco Videoscape Policy Resource Manager 3.5.4...