SQL Injection Vulnerability in pr***.asp Page of Time Network Website Builder System

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...

File upload vulnerability in the pr***.cl***.php file of the Laikai e-commerce system

Laike e-commerce system is an open source e-commerce system. A file upload vulnerability exists in the pr.cl.php file of Laikai E-commerce System. Attackers can use this vulnerability to obtain server privileges...

SQL injection vulnerability in the i*** parameter of the pr***.php page of the Suzhou Topps website builder system

Suzhou Topps Network Technology Co., Ltd. is a network company that provides website construction and promotion services. Suzhou Topps Web site building system pr.php page i parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL injection vulnerability in the i*** parameter of the pr***.php page of the website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a network company that provides website construction and website optimization rental/sale. Suzhou Ernst Network Technology Co., Ltd. building system pr.php page i parameters exist SQL injection vulnerability, an attacker can use the vulnerability to...

SQL Injection Vulnerability in pr***.asp Page of Yiming Networks Website Builder System

Yiming Networks is an organization engaged in website construction, webpage production, website promotion, domain name registration, web hosting, enterprise mailbox, space rental, and other Internet product-related services. A SQL injection vulnerability exists in the pr.asp page of Yiming's...

SQL Injection Vulnerability in pr***.asp Page of Yiming Networks Website Builder System

Yiming network is engaged in website construction, webpage production, website promotion, website optimization, webpage design, website maintenance, domain name registration, web hosting, enterprise mailbox, space rental, website promotion, 3721 network real name, Baidu bidding ranking, Google...

java-1.8.0-openjdk security update

1:1.8.0.232.b09-0 - Update to aarch64-shenandoah-jdk8u232-b09. - Switch to GA mode for final release. - Remove PR1834/RH1022017 which is now handled by JDK-8228825 upstream. - Resolves: rhbz1753423 1:1.8.0.232.b08-0.0.ea - Update to aarch64-shenandoah-jdk8u232-b08. - Resolves: rhbz1753423...

Fedora 29 : ming (2019-03aa4f746c)

Backport security fixes from PR145 Fixes: CVE-2018-7866, CVE-2018-7873, CVE-2018-7876, CVE-2018-9009, CVE-2018-9132 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

Jieyang City Jike Computer Network Co., Ltd. website building system pr***_li***.asp suffers from SQL injection vulnerability.

Jieyang City, Jike Computer Network Co., Ltd. specializes in Internet business information, providing a full range of services from domain name registration, web hosting rental, web page design, production, maintenance, CGI writing, database design to the home page of the network of publicity,...

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. A SQL injection vulnerability exists in the yiqicms front-end pr.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL injection vulnerability in pr***.php file of website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is engaged in marketing planning, the company provides website design, graphic design, program development and Internet marketing. There is a SQL injection vulnerability in the pr.php file of the website building system of Suzhou Ernst Network Technology...

SQL injection vulnerability in pr***_sh***.php file of website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is engaged in marketing planning, the company provides website design, graphic design, program development and Internet marketing. There is a SQL injection vulnerability in the prsh.php file of the website building system of Suzhou Ernst Network Technolog...

CVE-2019-1010261

Gitea 1.7.0 and earlier is affected by: Cross Site Scripting XSS. The impact is: Attacker is able to have victim execute arbitrary JS in browser. The component is: go-get URL generation - PR to fix: https://github.com/go-gitea/gitea/pull/5905. The attack vector is: victim must open a specifically...

SQL injection vulnerability in the pr***-sh***.asp file of Yueqing Hanke's website builder system.

Yueqing Hanke Network is a company engaged in website construction. A SQL injection vulnerability exists in the pr-sh.asp file of the website building system of Yueqing Hanke Network. Attackers can use the vulnerability to obtain sensitive information in the database...

Stored cross-site scripting in Grid component in Vaadin 7 and 8

Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector. See CWE-80: Improper Neutralization of...

Cross-Site Scripting

Overview All versions of eco are vulnerable to Cross-Site Scripting XSS. The package's default escape implementation fails to escape single quotes, which may allow attackers to execute arbitrary JavaScript on the victim's browser. Recommendation No fix is currently available. Consider using an...

Reflected cross-site scripting in default RouteNotFoundError view in Vaadin 10 and 11-13

Missing output sanitization in default RouteNotFoundError view in com.vaadin:flow-server versions 1.0.0 through 1.0.10 Vaadin 10.0.0 through 10.0.13, and 1.1.0 through 1.4.2 Vaadin 11.0.0 through 13.0.5 allows attacker to execute malicious JavaScript via crafted URL. See CWE-81: Improper...

SQL injection vulnerability in pr***.php page of Jinan Yuxia Information Technology Co.

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

Emerson HART SE4003S2B6 Analog Input Card Detection

Binary data 756779.prm...

Amid Bug Bounty Hype, Sometimes Security is Left in the Dust

In January, the European Union kicked-off over a dozen new bug bounty programs targeting a bevy of popular open-source programs used by its members. The effort was supposed to be met with cheers. But instead, the launch sparked an unexpected backlash from the security community. The EU’s program...