Vulnerabilities fixed in Samsung Mobile

Samsung has fixed several vulnerabilities in its Android distribution. The vulnerabilities allow a malicious potentially able to carry out attacks leading to the following categories of damage: Denial-of-Service DoS Remote code execution User Rights Access to sensitive data Access to system data...

Privilege escalation

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse...

CVE-2020-24030

ForLogic Qualiex v1 and v3 has weak token expiration. This allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. NOTE: as of 2025-10-14, the Supplier's perspective is that this is "not exploitable in the current implementation. Tokens are properly expire...

CVE-2020-24030

CVE-2020-24030 affects ForLogic Qualiex v1 and v3, where weak token expiration allows remote unauthenticated privilege escalation and access to sensitive data via token reuse. Across connected sources, the issue is tied to token handling rather than a traditional flaw in application logic. The Re...

CVE-2020-16206

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16206

The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W all versions...

CVE-2020-16206

CVE-2020-16206 affects Red Lion N-Tron 702-W and 702M12-W (all versions). It is a stored cross-site scripting vulnerability (CWE-79) caused by improper neutralization of input during web page generation, allowing an attacker to remotely execute arbitrary code and access sensitive data. Several so...

USN-4479-1 python-django vulnerabilities

It was discovered that Django, when used with Python 3.7 or higher, incorrectly handled directory permissions. A local attacker could possibly use this issue to obtain sensitive information, or escalate permissions...

SQL Injection Vulnerability in cms Website Building System of Kaiping Lianke Network Technology Co.

Kaiping Lianke Network Technology Co., Ltd. is a company that mainly specializes in website construction, website promotion, speed software, sanitary ware ERP management software, and micro letter marketing. Kaiping City, Lianke Network Technology Co., Ltd. building system there are SQL injection...

The vulnerability of the WordPress website content management system, related to the redirection of URLs to an unreliable website, allows attackers to access sensitive data and compromise its integrity.

The vulnerability of the WordPress website content management system is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

Vulnerabilities fixed in Red Hat JBoss Enterprise Application Platform

Vulnerabilities have been fixed in Red Hat JBoss Enterprise Application Platform. The vulnerabilities allow a malicious person to able to perform attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of data Bypassing authenticatio...

Vulnerabilities fixed in Apache HTTP server

Vulnerabilities have been fixed in Apache. The vulnerabilities allow a malicious person to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution User rights Access to sensitive data -= Ubuntu =- Canonical has...

CVE-2020-10779

Red Hat CloudForms 4.7 and 5 leads to insecure direct object references IDOR and functional level access control bypass due to missing privilege check. Therefore, if an attacker knows the right criteria, it is possible to access some sensitive data within the CloudForms...

SQL Injection Vulnerability in Beijing Zhongcheng Kexin Integrated Management Platform

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a service provider of the whole tourism industry chain with a high market share in China. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin, which can be exploited by attackers to...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd, provides Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network marketing and...

Qualcomm Bugs Open 40 Percent of Android Handsets to Attack

Six serious bugs in Qualcomm’s Snapdragon mobile chipset impact up to 40 percent of Android phones in use, according research released at the DEF CON Safe Mode security conference Friday. The flaws open up handsets made by Google, Samsung, LG, Xiaomi and OnePlus to DoS and escalation-of-privilege...

SQL Injection Vulnerability in Go*** File of NiuShop Multi-Merchant Mall System of Shanghai Niuzhiyun Network Technology Co.

Niushop Multi-Merchant Mall System is a B2B2C mall system with Uniapp applet and Thinkphp6. Shanghai NiuZhiyun Network Technology Co., Ltd NiuShop Multi-commercial Mall System Go file there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in...

SQL Injection Vulnerability in Anshan Guangwu Network Technology Co.

Anshan Guangwu Network Technology Co., Ltd. mainly provides website production and hosting maintenance, domain name registration services and network marketing and promotion programs. Anshan Guangwu Network Technology Co., Ltd. website building system SQL injection vulnerability, attackers can us...

SQL Injection Vulnerability in Hefei Blue Collar Business Co.

Hefei Blue Collar Business Information Co., Ltd. SEO team, founded in 2008, since its inception has been studying the combination of website Baidu optimization, Internet marketing, website construction. To provide enterprises with a full range of information technology application program. Hefei...

ZZCMS suffers from SQL injection vulnerability

ZZCMS is a content management system for Merchants Network. ZZCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...