PT-2021-17505

exploit 1. CVE-2021-27552: SQL injection vulnerability in /Final/edit user.php via the id parameter https://github.com/sapkota2k20/CVE-2021-27552 2. CVE-2021-27553: Incorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php...

PT-2021-17504

exploit 1. CVE-2021-27552: SQL injection vulnerability in /Final/edit user.php via the id parameter https://github.com/sapkota2k20/CVE-2021-27552 2. CVE-2021-27553: Incorrect access control vulnerability that may lead to LPE through /Final/normal/dashboard.php...

CVE-2021-22331

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

CVE-2021-22331: Improper Neutralization of Special Elements in Output Used by a Downstream Component

There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product...

Command Execution Vulnerability in the Firewall Gateway Management System of Shenzhen Hechen Communication Technology Co.

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Denial of service

A denial of service vulnerability was found in nttyreceivecharspecial in drivers/tty/ntty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop due to a changing ldata-readhead, and a missing sanity check and cause a threat to the system availabili...

Design/Logic Flaw

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include...

Arbitrary File Download Vulnerability in Northeast Normal University Ideal Software Corporation's Smart Education Cloud Platform

Founded in 2001, Northeast Normal University Ideal Software Co., Ltd. is mainly engaged in the theoretical research of basic education informatization, the research, development, promotion and application of basic education resources and software, the training of teachers' education informatizati...

PT-2021-14956

Name of the Vulnerable Software and Affected Versions: Huawei NIP6300 affected versions not specified Huawei NIP6600 affected versions not specified Huawei NIP6800 affected versions not specified Huawei S1700 affected versions not specified Huawei S2700 affected versions not specified Huawei S570...

Design/Logic Flaw

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service...

Double free

There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising...

PT-2021-14940

Name of the Vulnerable Software and Affected Versions: Taurus-AL00A version 10.0.0.1C00E1R1P1 Description: The issue is related to an out-of-bound read. A module does not properly verify some input, allowing attackers to exploit this by sending malicious input through a specific app, which could...

Cyber Essentials and the New Normal

TL;DR Cyber Essentials has changed and aspects of the new normal are catching many by surprise. Increased levels of evidence and stricter controls determining a pass or a fail are in place. Be prepared for the increased hurdles Ask for assistance before starting the process if you are uncertain o...

PT-2021-27550

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves functions such as gvs read unaligned le, gv...

PT-2021-27457

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions, including msan memcpy.part.51, gvs read unaligned le, a...

graduation_design

This is a Python script for a web intrusion detection system using machine learning. The script uses the scikit-learn library to implement a supervised learning approach. It collects and preprocesses normal requests and attack payloads, and uses a Support Vector Machine SVM to classify new reques...

CVE-2020-9093

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1C00E1R1P1. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privileg...

CVE-2020-9200

There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...

Huawei Taurus-AL00A Resource Management Error Vulnerability

Huawei Taurus-AL00A is a smartphone from Huawei of China.Huawei Taurus-AL00A is vulnerable to a resource management error. A module fails to properly process a message, and a function references freed memory. An attacker could use this vulnerability to trick a user into running a carefully...

Huawei Taurus-AL00A 资源管理错误漏洞

Huawei Taurus-AL00A is a smartphone from Huawei of China.Huawei Taurus-AL00A is vulnerable to a resource management error. A module fails to properly process a message, and a function references freed memory. An attacker could use this vulnerability to trick a user into running a carefully...