CVE-2020-35309: Improper Neutralization of Input During Web Page Generation

Bakeshop Online Ordering System in PHP/MySQLi 1.0 is affected by cross-site scripting XSS which allows remote attackers to inject an arbitrary web script or HTML in admin dashboard - "Categories"...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Company Limited (CNVD-2021-04846)

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Science and Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, food ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development C...

SQL Injection Vulnerability in the Backend of Online Food Ordering System of Shenzhen Dianhang Technology Development Co.

Ltd. is a one-card system and product provider, offering attendance system, ordering system, consumption system, access control system products and services. There is a SQL injection vulnerability in the backend of the online food ordering system of Shenzhen Dianhang Technology Development Co. An...

SUSE-SU-2020:3916-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

SQL Injection Vulnerability in the Frontend of Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system in...

SQL Injection Vulnerability in Food Ordering System of Guangzhou Guowan Electronic Technology Co.

Guangzhou Guowan Electronic Technology Co., Ltd. is a high-tech enterprise with research, development, design and production of enterprise management system, intelligent card system and so on. There is a SQL injection vulnerability in the ordering system of Guangzhou Guowan Electronic Technology...

SUSE-SU-2020:14578-1 Security update for xen

This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests bsc117949 XSA-115. - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions bsc1179498...

Bakeshop Online Ordering System 1.0 Cross Site Scripting

Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting Date: 26-11-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting

Exploit Title: Bakeshop Online Ordering System 1.0 - 'Owner' Persistent Cross-site scripting Date: 26-11-2020 Exploit Author: Parshwa Bhavsar Vendor Homepage: https://www.sourcecodester.com/ Software Link:...

OPENSUSE-SU-2020:2057-1 Security update for ceph

This update for ceph fixes the following issues: - CVE-2020-25660: Bring back CEPHXV2 authorizer challenges bsc1177843. - Major batch refactor of ceph-volume that addresses a couple of issues bsc1151612, bsc1158257 - Documented Prometheus' security model bsc1169134 - monclient: Fixed an issue whe...

Butler ordering is prone to SQL injection vulnerability

Butler's Order Easy, a collection of PC Mall + WeChat Mall + WeChat Small Program + APP Mall + h5 Mall four-in-one online ordering mall system, seamlessly connecting to Butler's software, to achieve seamless connection of commodities, inventory, orders, customers, finance and other data. Butler's...

Nando's Hackers Feast on Customer Accounts

Diners at a popular chicken-dinner chain have seen hundreds of dollars siphoned out of their bank accounts, after cybercriminals were able to access their restaurant ordering credentials. The issue though is that payment-card information is not stored within Nando’s accounts, leaving some questio...

Denial Of Service (DoS)

xen is vulnerable to denial of service DoS. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such a sequence is missing an appropriate memory barrier e.g., smpmb ...

Missing memory barriers when accessing/allocating an event channel

ISSUE DESCRIPTION Event channels control structures can be accessed lockless as long as the port is considered to be valid. Such sequence is missing appropriate memory barrier e.g smpmb to prevent both the compiler and CPU to re-order access. IMPACT A malicious guest may be able to cause a...

WordPress NAB Transact WooCommerce 2.1.0 Payment Bypass Vulnerability

Exploit for php platform in category web applications Title: Payment bypass Product: WordPress NAB Transact WooCommerce Plugin Vendor Homepage: https://woocommerce.com/products/nab-transact-direct-post/ Vulnerable Version: 2.1.0 Fixed Version: 2.1.2 CVE Number: CVE-2020-11497 Author: Jack Misiura...

Acronis: TrueImage for Acronis True Image 2020 - Untrusted DLL Search-Ordering lead to Privilege Escalation as Administrative account

Vulnerability description not provided...

Hundreds of Uber Eats User records leaked on Dark Web

By Zara Khan User records of Uber Eats, an American online food ordering service, have been leaked by... This is a post from HackRead.com Read the original post: Hundreds of Uber Eats User records leaked on Dark Web...

Design/Logic Flaw

In Ubuntu's trust-store, if a user revokes location access from an application, the location is still available to the application because the application will honour incorrect, cached permissions. This is because the cache was not ordered by creation time by the Select struct in...

The vulnerability in the set of Java libraries provided by Google Guava involves unlimited memory allocation in the classes AtomicDoubleArray and CompoundOrdering, allowing a hacker to cause a service failure.

The vulnerability in the Java libraries of Google Guava relates to the unlimited memory allocation in the AtomicDoubleArray and CompoundOrdering classes. Exploiting this vulnerability could allow a remote attacker to cause a service failure...