Sensitive Data Exposure

Overview Versions of sequelize-cli prior to 5.5.0 are vulnerable to Sensitive Data Exposure. The function filteredURL does not properly sanitize the config.password value which may cause passwords with special characters to be logged in plain text. Recommendation Upgrade to version 5.5.0 or later...

SAP NetWeaver Process Integration Information Disclosure Vulnerability (CNVD-2019-09637)

SAP NetWeaver is a service-oriented application and integration platform for SAP applications to provide a development and runtime environment can also be used and other applications and systems for custom development and integration. An information disclosure vulnerability exists in SAP NetWeave...

PT-2019-6172 · Podofo +2 · Podofo +2

Name of the Vulnerable Software and Affected Versions: PoDoFo version 0.9.6 Description: The issue is related to the exposure of sensitive information to unauthorized actors. It involves the IsNextToken function in the src/base/PdfToenizer.cpp component, which can be exploited by attackers to...

CVE-2018-1917

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow an authenticated user to access JSP files and disclose sensitive information. IBM X-Force ID: 152784...

SQL Injection Vulnerability in Website Building System of Suzhou Weilian Network Technology Co.

Suzhou Weilian Network Technology Co., Ltd. is an enterprise e-commerce service-oriented technology enterprises. There is a SQL injection vulnerability in the website building system of Suzhou Weilian Network Technology Co. Attackers can use the vulnerability to obtain sensitive information in th...

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

Flash Player < 27.0.0.187 Multiple Vulnerabilities (APSB17-33)

Binary data 700427.prm...

Directory Traversal Vulnerability in NetSoft Zhicheng Classifieds Website System

NetSoft Zhicheng classifieds website system is a php mysql based website building system. NetSoft Zhicheng classifieds website system has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Jommla! Re*** Component

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Re component, which can be exploited by an attacker to obtain sensitive information from the database...

GHSA-8CW6-5QVP-Q3WJ Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL

In Apache Spark 2.1.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, it's possible for a malicious user to construct a URL pointing to a Spark cluster's UI's job and stage info pages, and if a user can be tricked into accessing the URL, can be used to cause script to execute and expose information from the...

SQL Injection Vulnerability in UsualToolCMS

UsualToolCMS UTCMS is an enterprise web content management system CMS based on PHP and MySQL. UsualToolCMS suffers from a sql injection vulnerability, which can be exploited by an attacker to obtain sensitive database information...

SQL Injection Vulnerability in HNCMS Search Module

HNCMS is based on PHP + MYSQL as the core development, free + open source Chinese labeling system. HNCMS search module SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in the Website Building System of Qihang Internet Information Technology Co.

Ltd. is a Tianjin website construction company as well as a Tianjin network company. There is a SQL injection vulnerability in the website building system of Tianjin Enterprise Zhicheng Technology Co. An attacker can use the vulnerability to obtain sensitive information from the database...

CVE-2019-4063

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 Standard Edition could allow highly sensitive information to be transmitted in plain text. An attacker could obtain this information using man in the middle techniques. IBM X-ForceID: 157008...

Joomla Zoo by YooTheme Components SQL Injection Vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in Joomla Zoo by YooTheme Components. An attacker can exploit this vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Super CMS Frontend lo***.php Page

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

DomainMOD 4.11.01 Custom Domain Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - Custom Domain Fields Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMo...

DomainMOD 4.11.01 ssl-provider-name Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - 'ssl-provider-name' Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 14-02-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...

DomainMOD 4.11.01 Owner Name Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and before - Owner name Field Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod...

DomainMOD 4.11.01 Registrar Cross Site Scripting

Exploit Title : DomainMOD 4.11.01 and beore - Registrar Cross-Site Scripting Author Discovered By : Mohammed Abdul Raheem Company Name : TrekShield IT Solutions Date : 04-12-2019 Vendor Homepage : https://domainmod.org/ Software Information Link : https://github.com/DomainMod/DomainMod Software...