Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability

Document Title: =============== Apple iOS 11.x & 12.x - Authentication Bypass Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2161 View Video: https://www.youtube.com/watch?v=m9VMidADJcc Release Date: ============= 2018-10-26 Vulnerability Laboratory ID...

SQL Injection Vulnerability in V1***.php file of YunYu CMS Enterprise Website Management System

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. There is a SQL injection vulnerability in the file V1.php of YUNUCMS enterprise website management system. An attacker can exploit the...

SQL injection vulnerability in ShopsN open source online store full web system (CNVD-2018-22116)

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN open source online store system has a...

S-CMS School Building System SQL Injection Vulnerability in Frontend

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the frontend of the S-CMS school website builder system. Attackers can use the vulnerability t...

Information Leakage Vulnerability in Dingpoint's CC8800 Series Products

DingdotVision CC8800 series products are the core products of DingdotVision's "Ultra Optical Network - EPON + CCMTS Cable Broadband Solution", and are the first commercial products in the industry to support C-DOCSIS. A vulnerability exists in CC8800 series products, which can be exploited by...

CVE-2018-0434 Cisco SD-WAN Solution Certificate Validation Vulnerability

A vulnerability in the Zero Touch Provisioning feature of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data by using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

Weakness in Apple MDM Tool Allows Access to Sensitive Corporate Info

Enterprises using Apple’s Device Enrollment Program DEP for mobile device management MDM enrollment, without adding secondary authentication, are placing themselves at risk for information exfiltration and attacks, according to researchers. MDM is a common enterprise technology offered by multipl...

SQL injection vulnerability in ZZCMS version 8.3 zs***.php file (CNVD-2018-19951)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Google Chrome WebRTC Buffer Overflow Vulnerability

Google Chrome is a web browser developed by Google, Inc. WebRTC is a component of the browser that supports real-time voice or video conversations. A buffer overflow vulnerability exists in WebRTC in Google Chrome versions prior to 69.0.3497.81. An attacker can exploit the vulnerability to obtain...

SQL Injection Vulnerability in the Website Building System of Shanghai Navigation Information Technology Co.

Shanghai pilot information technology limited company is a set of website design and production, brand planning, corporate image design and network marketing, information technology services in one of the new Internet company. There is a SQL injection vulnerability in the website building system ...

SQL Injection Vulnerability in Taizhou Advertising Website System

Taizhou Advertising Network is a company that provides users with stable and efficient application services in the field of Internet as well as wireless communication. A SQL injection vulnerability exists in the Taizhou Advertising Network website builder system. An attacker can exploit the...

SQL Injection Vulnerability in Physical Examination System of Beijing Zhongke Hengye Technology Co.

Ltd. specializes in the construction and operation of software and hardware integrated health check products and health + Internet platform. A SQL injection vulnerability exists in the medical checkup system of Beijing Zhongke Hengye Technology Co. Ltd, which can be exploited by attackers to obta...

Wavemaker Studio 6.6 - Server-Side Request Forgery

Exploit Title: Wavemaker Studio 6.6 - Server-Side Request Forgery SSRF. Exploit Author: Gionathan "John" Reale Google Dork: N/A Date: 2018-08-01 Vendor Homepage: http://www.wavemaker.com/ Software Link: https://github.com/cloudjee/wavemaker/blob/master/wavemaker/wavemaker-studio/ Affected Version...

SQL Injection Vulnerability in Huayue Ares Enterprise Management Consultant Co.

Hua Yue Ares Enterprise Management Consultant Limited is a company that provides information computerization and integration services for small and medium-sized enterprises. A SQL injection vulnerability exists in the website builder system of Hua Yue Ares Enterprise Management Consultant Limited...

SQL Injection Vulnerability in Website Building System of Nanjing DotMo Network Technology Co.

Nanjing dot ink network technology Co., Ltd. to provide brand website design and production, mall program custom development, APP development, WeChat secondary development services, development of independent intellectual property rights of the mall system and CMS system. There is a SQL injection...

SQL Injection Vulnerability in the Search of Complaint and Suggestion Module of SMiCMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school cluster system complaints and suggestions module search at the existence of SQL injection vulnerabilities. Attackers c...

SQL Injection Vulnerability in Interview Module of State Micro CMS School Crowd System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system interview module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Website Building System of Haikou ECCOM Sky Information Technology Co.

hereinafter referred to as "ECCOM Sky" is a collection of website construction, website planning, website optimization, search engine optimization and a variety of office software development, program development in one of the network information technology services company. There is a SQL...

SQL Injection Vulnerability in Website Building System of Shanghai JUE Policy Information Technology Co.

Ltd. provides Shanghai professional website construction, WAP website construction, mobile APP development, website revision, web design, website promotion, integrated marketing. There is a SQL injection vulnerability in Shanghai JUE's website builder system, which can be exploited by attackers t...

SQL Injection Vulnerability in ZZCMS Website Builder System

zzcms is asp language to do free open-source station-building system, mainly facing the majority of webmasters to use. ZZCMS website builder system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive information in the database...