SQL Injection Vulnerability in Website Building System of Zhejiang Ningbo Mufeng Network Technology Co.

Ningbo MUFENG Network Technology Co., Ltd. is an expert in simplified website construction, with Ningbo website construction, website production, website development, graphic design, corporate branding as the core business. Ltd. has a SQL injection vulnerability that can be exploited by attackers...

Malicious Package

Overview indonesian-province is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

File upload vulnerability in the website building system of Anhui Fishing Blue Education Software Technology Co.

Anhui Fishing Blue Education Software Technology Co., Ltd. is a science and technology enterprise specializing in secondary vocational education technology research and education informatization software research and development, and is one of the first batch of listed enterprises in Anhui Provin...

File Upload Vulnerability in Cheng Technologies CMS

Xi'an Zhicheng Information Technology Co., Ltd. is one of the ICP/ISP enterprises in Shaanxi Province that can operate value-added telecommunication business directly assessed by the Ministry of Industry and Information Technology and approved by Shaanxi Provincial Communication Administration...

Vulnerability of the Android APP of Hunan Provincial People's Government with Ultra-rights Access (CNVD-2019-01346)

Hunan Provincial People's Government Android APP is the mobile portal of Hunan Provincial Government information disclosure, with news news, matters inquiries, matters applications, office query, service evaluation, payment services, logistics services, material upload, online reservation, office...

teara.govt.nz XSS vulnerability

Open Bug Bounty ID: OBB-628139 Description| Value ---|--- Affected Website:| teara.govt.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL injection vulnerability in class parameter of Interactive Creation website building system

Interactive Creative Xiamen Digital Technology Co., Ltd. is a brand website construction company in Fujian Province, "Interactive Creative" is one of its independent brands. A SQL injection vulnerability exists in the class parameter of Interactive Creative's website building system. An attacker...

provincia.viterbo.gov.it XSS vulnerability

Vulnerable URL: http://www.provincia.viterbo.gov.it/process/ricerca.php?formricercasito=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

provincia.bergamo.it XSS vulnerability

Vulnerable URL: http://www.provincia.bergamo.it/Provpor/provBgSearchProcess.jsp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...

provincia.fermo.it XSS vulnerability

Vulnerable URL: http://www.provincia.fermo.it/?qsearch=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

SQL injection vulnerability in the 'id' parameter of the CMS system of Changchun Beichen Network Technology Co.

Changchun Beichen Network Technology Co., Ltd CMS station building system is a government website construction system in Jilin Province. A SQL injection vulnerability exists in the Changchun Beichen Network Technology Co Ltd CMS builder system. The lack of filtering of the 'id' parameter allows a...

SQL Injection Vulnerability in Province_city.php File of Ohu Government System

Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A SQL injection vulnerability exists in the provincecity.php file of the Ohuhu government system. An attacker can exploit this vulnerability to execute arbitrary SQL statements and obtain sensitive...

Generalized SQL Injection Vulnerability in Hubei Province Urban Construction Information Network

Hubei construction engineering information network is Hubei construction engineering information industry first portal official station. The Hubei Urban Construction Information Network suffers from a generic SQL injection vulnerability. It allows attackers to utilize common SQL injection tools t...

省级农机购置补贴信息管理系统 gongs.aspx SQL注入漏洞

No description provided by source...

eltiempo.es XSS vulnerability

Vulnerable URL: http://www.eltiempo.es/fotos/en-provincia-murcia/murcia-a-las-8"alert'XSSPOSED'...

A common Site Management System any user login/SQL injection/GetShell vulnerabilities source code analysis-vulnerability warning-the black bar safety net

Brief description: This system is not open source, most of the universities in use, turn the source off at the next Detailed description: 0x00 General case: code area Manufacturer: Rio Tinto tech Official website: http://www.ltpower.net/ The main is to do the educational products of the...

Chinese hackers infiltrate Indian Defence Research Organisation

According to an exclusive report published today by DNA news, the computers of highly sensitive Defence Research and Development Organisation DRDO have reportedly been hacked by Chinese hackers as biggest security breach in the Indian Defence ever. Infiltrate leading to the leak of thousands of t...

APT1-Themed Spear Phishing Campaign Linked to China

Researchers at Seculert have discovered a link between spear phishing campaigns targeting Japanese and Chinese journalists, post-Mandiant’s APT1 report, and domains connected to the Aurora attacks on Google and the Shady RAT campaign. In particular, in the attacks against the Japanese, the malwar...

Insecure Mail Server Offers Chinese Government Accounts To The Masses

A security researcher who identified holes in SCADA software used by utilities in China has issued a new warning to that country’s CERT about insecure Web infrastructure, including an e-mail server that allows any Web user to create their own Chinese government mail account. Dillon Beresford, a...

Researchers: Google Aurora Attackers Back in Business?

Just when you thought it was safe to go back in your e-mail…Researchers say a new round of targeted attacks appear to come from the same group responsible for attacks against Google and other top U.S. firms. Writing on the Symantec Security blog...