SQL Injection Vulnerability in the Health Collection and Reporting System of Shanxi Xianqi Technology Co. Ltd (CNVD-2020-30210)

Ltd. is a high-tech enterprise specializing in the research, development and sales of wireless smart home system. Shanxi Xianqi Technology Co., Ltd. health collection reporting system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

SQL Injection Vulnerability in LaySNS of Wuhan Classen Technology Co. Ltd (CNVD-2020-30205)

Laysns using Think + Layui as the technical basis for development, using the OOP approach to the basic operation of the framework to build, modular development approach to do for the form of functional development. Wuhan class Sen Technology Co., Ltd. LaySNS SQL injection vulnerability, attackers...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Gitlab

It is an offensive tool for web application security testing. The primary CVE ID present in the provided context is CVE-2016-9086. The target product/service or framework is GitLab. The vulnerability class/vector is a remote code execution RCE vulnerability. The probable entry point is the GitLab...

SQL injection vulnerability in the website building system li***.php page of Hubei Guosheng Technology Co.

Ltd. is a full-network value marketing service provider, to provide customers with comprehensive digital innovation services, to help traditional enterprises to realize the "Internet +" transformation and upgrading. There is a SQL injection vulnerability in the li.php page of the website building...

SQL Injection Vulnerability in Hop-Up Website Building System (CNVD-2020-31569)

Founded in 2007, HYN is a comprehensive enterprise specializing in providing customers with a series of enterprise services such as website, mailbox, advertisement, software, finance and tax. There is a SQL injection vulnerability in the website builder system of Hop-Up Network, which can be...

SQL Injection Vulnerability in Ziou Technology's Lotto Coupon System

LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city. There is a SQL injection vulnerability in Ziou Technology's LODE Same Town Coupon System, which can be exploited by attackers to obtain sensitive information from the database...

Red Hat Keycloak Information Disclosure Vulnerability (CNVD-2020-35678)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An information disclosure vulnerability exists in Red Hat Keycloak versions prior to 9.0.0. The vulnerability stems from an error in the...

HCL Technologies Nomad Information Disclosure Vulnerability

HCL Technologies Nomad is an application from HCL Technologies India for using, managing Domino application development platform in mobile devices. A security vulnerability exists in HCL Technologies Nomad for Android and iOS platforms, which stems from the fact that the software communicates in...

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2020-32338)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability to obtain sensitive information from the database...

Cisco Hosted Collaboration Mediation Fulfillment Code Issue Vulnerability

Cisco Hosted Collaboration Mediation Fulfillment HCM-F is a core management component of a Hosted Collaboration Solution HCS from Cisco. The product provides inventory management, license management, and service provider toolkit. A code issue vulnerability exists in Cisco Hosted Collaboration...

Dell EMC RSA Archer Information Disclosure Vulnerability (CNVD-2020-31252)

Dell EMC RSA Archer is an enterprise IT governance and compliance governance product from Dell USA. The product enables the development of eGRC programs for managing enterprise risk, automating business processes, and more. An information disclosure vulnerability exists in versions prior to Dell...

SQL Injection Vulnerability in the Website Building System of Ruian Uber Technology Co.

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

CVE-2020-10933

An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocketreadnonblockrequestedsize, buffer, exception: false, the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous valu...

SQL Injection Vulnerability in 4-in-1 Enterprise Website Management System

Four-in-one enterprise website management system is a computer website + mobile website + WeChat public number + small program in one of the content management system. A SQL injection vulnerability exists in the Four-in-One Enterprise Website Management System, which can be exploited by attackers...

YouDianCMS suffers from SQL injection vulnerability (CNVD-2020-28096)

YouDianCMS set computer website, mobile website, micro letter, APP, small program in one, share space, data automatic synchronization, is the domestic open source five station one excellent solution. YouDianCMS has SQL injection vulnerability, attackers can use the vulnerability to obtain databas...

SQL Injection Vulnerability in Website Building System of Shenzhen Shenzhou Tongda Network Technology Co.

Shenzhen Shenzhou Tongda Network Technology Co., Ltd. specializes in providing Tencent enterprise mailbox, high-end website construction PC website, cell phone website, WeChat public account, SEO optimization and promotion, enterprise WeChat and other network infrastructure services and network...

SQL Injection Vulnerability in Waychar Enrollment System aj***.php Page mo*** Parameters

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar enrollment system aj.php page mo parameters exist SQL injection vulnerability, an attacker can use this vulnerability to obtain sensitive information in the database...

CVE-2020-10997

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...

WordPress Advanced Woo Search Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Advanced Woo Search is a search plugin used in it. An information disclosure vulnerability exists in ajax query requests in Wordpress...

SQL Injection Vulnerability in Jinwei Mobile Mall System (CNVD-2020-29419)

Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall System, which can be exploited by attackers to obtain sensitive information from the database...