SQL injection vulnerability in Douxin Us***.cl***.php file (CNVD-2021-03469)

Douxin is an open source framework focused on the development of WeChat. A SQL injection vulnerability exists in the Douxin Us.cl.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Vulnerabilities fixed in Android

Vulnerabilities have been fixed in Android. The vulnerabilities allow a malicious person to carry out attacks that lead to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to system data Increased user privileges As usual,...

PT-2024-10821 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient policy enforcement in Navigation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially affect a...

HcCMS suffers from SQL injection vulnerability

HcCms is a free website building system developed in php language. HcCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

ShopsN open source mall system v3.0.6 de**** module SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. is a full-featured in line with enterprise-class commercial standards really allow free commercial use of the open source online store full network system . ShopsN open source mall system v3.0.6 de module SQ...

SQL Injection Vulnerability in Panmicro Collaboration Office System (CNVD-2021-01375)

Ltd. was founded in 2001, headquartered in Shanghai, focusing on the field of collaborative management software, and is committed to collaborative OA as the core to help enterprises build a unified mobile office platform. A SQL injection vulnerability exists in Panmicro's collaborative office...

Acronis: HTTP Request Smuggling on https://promosandbox.acronis.com

Summary The website https://promosandbox.acronis.com is vulnerable to HTTP Request Smuggling which can be abused by an attacker to redirect all the users to a malicious website. A redirect can be forced by changing the Host request header using the path /sf but the website will redirect you to...

Google Android Information Disclosure Vulnerability (CNVD-2020-73454)

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Vulnerabilities fixed in F5 BIG-IP

Vulnerabilities have been fixed in F5 BIG-IP. The vulnerabilities allow a malicious party to launch attacks that lead to the following categories of damage: Cross-Site Scripting XSS. Denial-of-Service DoS. Circumvention of security measure Spoofing Accessing sensitive data F5 has released updates...

Vulnerabilities fixed in XStream

Vulnerabilities have been fixed in XStream. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Manipulation of data Access to sensitive data The vulnerabilities are exploitable only when using the defau...

Vulnerabilities fixed in Red Hat OpenShift Container Platform

Vulnerabilities have been fixed in Red Hat Openshift Container Platform. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service Manipulation of data Access to sensitive data Red Hat has released updates to address the...

SQL Injection Vulnerability in Worklog, a Qixing Worklog System (CNVD-2020-73419)

Kaixing worklog system worklog is to build the enterprise internal collaborative office based on B / S a software system . The system uses ASP.NET language development. Qixing worklog system worklog SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database...

SQL Injection Vulnerability in CRM System E4/Standard Edition of Pengwei Software Co.

Pengwei Software Co., Ltd. specializes in CRM software products, solutions and technical services of innovative enterprises. A SQL injection vulnerability exists in the E4/Standard version of the CRM system of Pengwei Software Co. Ltd, which can be exploited by attackers to obtain sensitive...

DedeCMSV6 suffers from information leakage vulnerability

DedeCMSV6 is based on PHP 7.x development, is scalable and fully open source. An information disclosure vulnerability exists in DedeCMSV6. An attacker can exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70837)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

Vulnerabilities fixed in Ubuntu kernel

Vulnerabilities have been fixed in Ubuntu kernel. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Access to sensitive data Access to system data -= Ubuntu =- Canonical has made updates...

SQL Injection Vulnerability in EQ Enterprise Management System

Guangzhou YiQuan Information Technology is an Internet SAAS provider specializing in online management software for small and medium-sized enterprises. EQ Enterprise Management System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

Vulnerabilities fixed in PHPMyAdmin

Ubuntu has fixed several vulnerabilities in the phpmyadmin package. The vulnerabilities allow an unauthenticated malicious party potentially able to launch attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF. Cross-Site Scripting XSS SQL Injection Access to...

Information Disclosure Vulnerability in Huawei IPC6625-Z30 and IPC6625-VRZ

Huawei Technologies Co. Ltd. is a global ICT information and communications infrastructure and smart terminal provider. An information disclosure vulnerability exists in Huawei IPC6625-Z30 and IPC6625-VRZ. An attacker can exploit the vulnerability to obtain sensitive information...

Vulnerabilities fixed in Cisco Webex and Cisco Webex Server

Vulnerabilities have been fixed in Cisco Webex Meetings and Cisco Webex Meetings Server. The vulnerabilities allow a malicious able to launch attacks that result in the following categories of damage: Cross-Site Scripting XSS. Circumvention of security measure Remote code execution User Rights...