SQL Injection Vulnerability in Beijing Yizaitong E-procurement System

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

SQL Injection Vulnerability in Hangzhou Chenshuo Network Technology Co.

Hangzhou Chenshuo Network Technology Co., Ltd. is a company that provides computer hardware and software, network information technology, e-commerce technology, technology development of electronic products and other services. Hangzhou Chenshuo Network Technology Co., Ltd. website building system...

S-CMS in***.php page suffers from a SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS in.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in TXEHR V15 lo***.aspx Page

Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software development and service company. The same share human resources management system-TXEHR V15...

Ahsay Backup File Upload Remote Code Execution Vulnerability

Ahsay Backup is a backup software development company that specializes in developing backup software. A remote code execution vulnerability exists in Ahsay Backup File Upload, which can be exploited by an attacker to execute arbitrary code remotely, perform unauthorized operations, cause a denial...

SQL Injection Vulnerability in Website Building System of Shenyang Rande Technology Co.

Shenyang LAND Technology Co., Ltd. specializes in website construction and collaborative office software development. There is a SQL injection vulnerability in the sh.php file of the website building system of Shenyang LAND Technology Co. Attackers can utilize the vulnerability to obtain sensitiv...

PT-2019-2656 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center affected versions not specified Description: The issue is related to insufficient validation of user-supplied input by the web-based management interface, which could allow an unauthenticated, remote attacker...

Vulnerability fixed in glib

A vulnerability has been fixed for Glib in Ubuntu. The vulnerabilities allow a malicious person to perform attacks that lead to the following categoriesn of damage: - Denial-of-Service DoS; - Manipulation of data; - Circumvention of security measure; - Access to sensitive data; - Access to system...

Positive SQL Injection Vulnerability in Academic Affairs Management System

Ltd. is a software enterprise and high-tech enterprise specializing in consulting, planning, construction and service in the field of university education informatization. There is a SQL injection vulnerability in the Zhengfang Academic Affairs Management System, which can be exploited by attacke...

SQL Injection Vulnerability in Tpshop v3.5 Us***.php Page

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the Tpshop v3.5 Us.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Tpshop Pr***.php Page at Active Order Deletion

Tpshop is a set of multi-merchant mode developed by Shenzhen Soleil Networks Limited mall system. A SQL injection vulnerability exists in the deletion of active orders on the Tpshop Pr.php page. Attackers can use the vulnerability to obtain sensitive information in the database...

CVE-2018-13885

Possible memory overread may be lead to access of sensitive data in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MDM9650, MDM9655, QCS605, Qualcomm 215, SD...

Sony Smart TVs Information Disclosure Vulnerability

Sony Smart Tvs are smart TV products from Sony Japan. A log information disclosure vulnerability exists in Sony Smart Tvs. The vulnerability originates from the abnormal output of log files from a networked system or product. An attacker could exploit this vulnerability to obtain sensitive...

CVE-2018-14996

The Oppo F5 Android device with a build fingerprint of OPPO/CPH1723/CPH1723:7.1.1/N6F26Q/1513597833:user/release-keys contains a pre-installed platform app with a package name of com.dropboxchmod versionCode=1, versionName=1.0 that contains an exported service named...

Best password managers for 2019

By Zehra Ali If you use the Internet, password managers should be a part of your online life as users are at high risk of cybercrime in this digital and technological era. Hackers are always looking for a way to access sensitive data of the vulnerable individual, and unfortunately, weak passwords...

SonicOS & SonicOSv CBC Cipher TLS Padding Vulnerability

A vulnerability in SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext data when CBC cipher suites are enabled. This vulnerability affected SonicOS Gen 5 version 5.9.1.10 and earlier, Gen 6 version 6.2.7.3, 6.5.1.3, 6.5.2.2, 6.5.3.1, 6.2.7.8, 6.4.0.0, 6.5.1.8,...

CVE-2018-13287

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration...

SQL Injection Vulnerability in 74cms Backend Pe***.cl***.php File

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. By Taiyuan Xunyi Technology Co., Ltd. was officially launched in 2009. 74cms background Pe.cl.php file SQL injection vulnerability. Attackers can use the...

SQL Injection Vulnerability in iCMS Backend da***.admincp File

iCMS is a free, clean, efficient, and useful PHP content management system. There is a SQL injection vulnerability in the iCMS backend da.admincp file, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Lotte Property Operations Management System

Lotte property management system is centered around four main lines of housing, owners, customer service and charges, which efficiently and intelligently realizes the process and standardized management, and greatly enhances the work efficiency of property personnel while improving the level of...