SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21817)

UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21816)

UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in UFIDA NC

UFIDA Network Technology Co., Ltd. is a company whose business scope includes the technical development, technical consulting and technology transfer of electronic computer software, hardware and external equipment. A command execution vulnerability exists in UFIDA NC, which can be exploited by a...

greatncveganbbq.brownpapertickets.com Cross Site Scripting vulnerability OBB-3848272

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the Trivision-NC-227WF IP camera’s microprogramming software lies in the escape from buffer boundaries into memory. This allows a intruder to execute arbitrary code, gain unauthorized access to protected information, or cause service failure.

The vulnerability of the Trivision-NC-227WF IP camera’s microprogramming software is related to the escape operation from the buffer in memory when processing the basic parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code, gain unauthorized access to protected...

nc-net.or.jp Cross Site Scripting vulnerability OBB-3841891

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Taokeyun SQL Injection Vulnerability

!/bin/bash Variables url="http://example.com/path/to/taokeyun/application/index/controller/m/Drs.php" cid="1' UNION SELECT 1,2,3,4,5,6,7,8,9,email FROM users-- -" Construct the request request="POST $url HTTP/1.1\r\n" request+="Content-Type: application/x-www-form-urlencoded\r\n"...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2024-03280)

NC Cloud is a large-scale enterprise digitalization platform, focusing on digital management, digital operation and digital business, helping large-scale enterprises realize the comprehensive digitalization of people, money, goods and customers. A SQL injection vulnerability exists in UFIDA NC...

Exploit for SQL Injection in Spiceworks Help_Desk_Server

Spiceworks Sort SQLi There's a SQLi in a sort parameter of...

Arbitrary File Download Vulnerability in Yonyou UAP/NC of UFIDA Network Technology Co.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in Yonyou UAP/NC, which can be exploited by attackers to obtain sensitive information...

CVE-2023-4748

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The...

Path traversal

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The...

CVE-2023-4748 Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The...

CVE-2023-4748

CVE-2023-4748 affects Yongyou UFIDA-NC (versions up to 20230807). The vulnerability is caused by manipulation of the filePath argument in PrintTemplateFileServlet.java, enabling path traversal. The issue can be exploited remotely and the public exploit is disclosed. No fixed version is documented...

PT-2023-30464 · Yonyou · Yongyou Ufida-Nc

Name of the Vulnerable Software and Affected Versions: Yongyou UFIDA-NC versions up to 20230807 Description: A critical issue has been found in the processing of the file PrintTemplateFileServlet.java, where the manipulation of the filePath argument leads to path traversal. This issue can be...

Remote Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a large-scale enterprise digital platform that deeply applies new-generation digital intelligence technology and is completely based on cloud-native architecture to create an open, interconnected, converged and intelligent integrated cloud platform. A remote command execution...

[SECURITY] Fedora 37 Update: gerbv-2.9.8-1.fc37

Gerber Viewer gerbv is a viewer for Gerber files. Gerber files are generated from PCB CAD system and sent to PCB manufacturers as basis for the manufacturing process. The standard supported by gerbv is RS-274X. gerbv also supports drill files. The format supported are known under names as NC-dril...

Fedora: Security Advisory for gerbv (FEDORA-2023-5f5bea627b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

nc-net.or.jp Cross Site Scripting vulnerability OBB-3519314

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

en.nc-net.or.jp Cross Site Scripting vulnerability OBB-3494667

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...