Google Chrome WebRTC Buffer Overflow Vulnerability

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A buffer overflow vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in the Website Building System of Shanghai Navigation Information Technology Co.

Shanghai pilot information technology limited company is a set of website design and production, brand planning, corporate image design and network marketing, information technology services in one of the new Internet company. There is a SQL injection vulnerability in the website building system ...

SQL Injection Vulnerability in Taizhou Advertising Website System

Taizhou Advertising Network is a company that provides users with stable and efficient application services in the field of Internet as well as wireless communication. A SQL injection vulnerability exists in the Taizhou Advertising Network website builder system. An attacker can exploit the...

SQL Injection Vulnerability in Physical Examination System of Beijing Zhongke Hengye Technology Co.

Ltd. specializes in the construction and operation of software and hardware integrated health check products and health + Internet platform. A SQL injection vulnerability exists in the medical checkup system of Beijing Zhongke Hengye Technology Co. Ltd, which can be exploited by attackers to obta...

Wavemaker Studio 6.6 - Server-Side Request Forgery

Exploit Title: Wavemaker Studio 6.6 - Server-Side Request Forgery SSRF. Exploit Author: Gionathan "John" Reale Google Dork: N/A Date: 2018-08-01 Vendor Homepage: http://www.wavemaker.com/ Software Link: https://github.com/cloudjee/wavemaker/blob/master/wavemaker/wavemaker-studio/ Affected Version...

SQL Injection Vulnerability in Huayue Ares Enterprise Management Consultant Co.

Hua Yue Ares Enterprise Management Consultant Limited is a company that provides information computerization and integration services for small and medium-sized enterprises. A SQL injection vulnerability exists in the website builder system of Hua Yue Ares Enterprise Management Consultant Limited...

SQL Injection Vulnerability in Website Building System of Nanjing DotMo Network Technology Co.

Nanjing dot ink network technology Co., Ltd. to provide brand website design and production, mall program custom development, APP development, WeChat secondary development services, development of independent intellectual property rights of the mall system and CMS system. There is a SQL injection...

SQL Injection Vulnerability in the Search of Complaint and Suggestion Module of SMiCMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school cluster system complaints and suggestions module search at the existence of SQL injection vulnerabilities. Attackers c...

SQL Injection Vulnerability in Interview Module of State Micro CMS School Crowd System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system interview module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Website Building System of Haikou ECCOM Sky Information Technology Co.

hereinafter referred to as "ECCOM Sky" is a collection of website construction, website planning, website optimization, search engine optimization and a variety of office software development, program development in one of the network information technology services company. There is a SQL...

SQL Injection Vulnerability in Website Building System of Shanghai JUE Policy Information Technology Co.

Ltd. provides Shanghai professional website construction, WAP website construction, mobile APP development, website revision, web design, website promotion, integrated marketing. There is a SQL injection vulnerability in Shanghai JUE's website builder system, which can be exploited by attackers t...

SQL Injection Vulnerability in ZZCMS Website Builder System

zzcms is asp language to do free open-source station-building system, mainly facing the majority of webmasters to use. ZZCMS website builder system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive information in the database...

PT-2018-7142 · Openstack · Openstack Orchestration (Heat) Service

Name of the Vulnerable Software and Affected Versions: OpenStack Orchestration heat service versions prior to 8.0.0 OpenStack Orchestration heat service version 6.1.0 OpenStack Orchestration heat service version 7.0.2 Description: An access-control flaw was found in the OpenStack Orchestration he...

SQL Injection Vulnerability in V1.7 Backend of School Worry-free Enterprise Building System

School carefree enterprise website system Xiao5uCompany is a set of company and enterprise-oriented website building system. SQL injection vulnerability exists in the background of XiaowuCompany V1.7. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Zenphoto local file inclusion vulnerability (CNVD-2018-16271)

Zenphoto is a free photo gallery content management system developed by the Zenphoto team. The system manages images and supports multimedia such as audio and video. A local file inclusion vulnerability exists in Zenphoto 1.4.14 and earlier versions. A remote attacker with administrative privileg...

CVE-2018-0610

Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain sensitive information...

NodAPS 'search' SQL Injection Vulnerability

NodAPS is an online appointment management system available in multiple languages and is used to help users schedule appointments more efficiently. A SQL injection vulnerability exists in NodAPS 'search'. An attacker can exploit the vulnerability to gain access to sensitive database information...

Security Bulletin: IBM Security Key Lifecycle Manager is affected by exposure of sensitive information to be cached by browser (CVE-2016-6097)

Summary IBM Security Key Lifecycle Manager allows web pages containing sensitive information to be cached by a browser. As a result this information will be stored unsafely for an indefinite amount of time on the user's hard drive. Attackers with local access or malware installed on the user's...

Monitoring Data & Data Access to Support Ongoing GDPR Compliance – Part III: Tools

The new European Union EU-wide General Data Protection Regulation GDPR was signed into law in late April 2016, and the compliance deadline came into effect on May 25, 2018. The Regulation is expansive and covers a variety of subject areas, provisions, and actions in the form of documented Article...

CVE-2018-4226

An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. watchOS before 4.3.1 is affected. The issue involves the "Security" component. It allows local...