SQL Injection Vulnerability in the Frontend Pi***.aspx Page of eDoc, an Electronic Document Library

Electronic document library eDoc is a click document management system developed by Anhui Qixing Studio. Electronic document library eDoc foreground Pi.aspx page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

Authentication flaw

LCDS Laquis SCADA prior to version 4.1.0.4150 allows an authentication bypass, which may allow an attacker access to sensitive data...

CVE-2019-1645

A vulnerability in the Cisco Connected Mobile Experiences CMX software could allow an unauthenticated, adjacent attacker to access sensitive data on an affected device. The vulnerability is due to a lack of input and validation checking mechanisms for certain GET requests to API's on an affected...

SQL Injection Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is an Internet solution for enterprises. A SQL injection vulnerability exists in UFIDA NC-IUFO Reporting System, which can be exploited by attackers to obtain sensitive information from the database...

LCDS LAquis SCADA Authentication Bypass Vulnerability

LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment with communication technology. An authentication bypass vulnerability exists in LCDS LAquis SCADA version...

SQL Injection Vulnerability in CCTV Digital Resource Teaching Platform

CCTV digital resource teaching platform is to provide users with online teaching services. SQL injection vulnerability exists in CCTF Digital Resource Teaching Platform. An attacker can exploit the vulnerability to log in to the account system and obtain sensitive information from the database...

Weak Password Vulnerability in Vimeo Interactive Website Management System

Chengdu Vimeo Interactive Network Technology Co., Ltd. is a technology company whose main products or services are all kinds of website construction, space domain name. Weak password vulnerability exists in the website management system of Weimei Interactive, which can be exploited by attackers t...

SQL Injection Vulnerability in Zhuhai Goling Information Air Quality Online Monitoring System

Zhuhai Goling Information Technology Co., Ltd. is a national high-tech enterprise specializing in the research and development, system integration, production, sales and technical services of network information security equipment, special communication equipment, ecological environment monitorin...

F5 BIG-IP APM and BIG-IP APM Clients svpn elevation of privilege vulnerability

F5 BIG-IP APM and BIG-IP APM Clients are both products of F5 Corporation in the U.S. F5 BIG-IP APM is a suite of access and security solutions. the APM Client is a suite of APM client software. svpn is one of the private VPN components. An elevation of privilege vulnerability exists in F5 BIG-IP...

SQL Injection Vulnerability in Laoban CMS V2.0 to***.php Page

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. A SQL injection vulnerability exists in the Laoban CMS V2.0 to.php page. An attacker can exploit this vulnerability to obtain sensiti...

anmi V1.1.0 SQL Injection Vulnerability in Foreground Us***.php File

Anmi program is a program that focuses on H5 mobile website/app construction. anmi V1.1.0 A SQL injection vulnerability exists in the front-end Us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

Google Android Video Component Information Disclosure Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA.Video is one of the video components. An information disclosure vulnerability exists in the Video component of Android, which is caused by the program forcing a Boolean variable to...

Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability

Document Title: =============== Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2161 View Video: https://www.youtube.com/watch?v=m9VMidADJcc Release Date: ============= 2018-10-26 Vulnerability Laboratory ID...

SQL Injection Vulnerability in V1***.php file of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is a SQL injection vulnerability in the file V1.php of YUNUCMS enterprise website management system. An attacker can exploit the...

SQL injection vulnerability in ShopsN open source online store full web system (CNVD-2018-22116)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN open source online store system has a...

S-CMS School Building System SQL Injection Vulnerability in Frontend

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the frontend of the S-CMS school website builder system. Attackers can use the vulnerability t...

Information Leakage Vulnerability in Dingpoint's CC8800 Series Products

DingdotVision CC8800 series products are the core products of DingdotVision's "Ultra Optical Network - EPON + CCMTS Cable Broadband Solution", and are the first commercial products in the industry to support C-DOCSIS. A vulnerability exists in CC8800 series products, which can be exploited by...

CVE-2018-0434 Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

Weakness in Apple MDM Tool Allows Access to Sensitive Corporate Info

Enterprises using Apple’s Device Enrollment Program DEP for mobile device management MDM enrollment, without adding secondary authentication, are placing themselves at risk for information exfiltration and attacks, according to researchers. MDM is a common enterprise technology offered by multipl...

SQL injection vulnerability in ZZCMS version 8.3 zs***.php file (CNVD-2018-19951)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...