SQL Injection Vulnerability in Jinwei Mobile Mall System (CNVD-2020-31079)

Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A SQL injection vulnerability exists in Jinwei Mobile Mall System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Heybbs Micro Community ad***.php File

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. A SQL injection vulnerability exists in the Heybbs Micro Community ad.php file. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Shanghai TengYan Information Technology Co.

The main business of Shanghai TengYan Information Technology Co., Ltd. is to provide customers with IT solutions and IT outsourcing services. Shanghai TengYan Information Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to...

SQL injection vulnerability in the ne***.php page of Huaxia Chemical website builder system (CNVD-2020-31519)

Huaxia chemical network is by Shanghai Danfan network technology limited company founded, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform of professional website. Huaxia Chemical website building system ne.php...

CVE-2020-10211

A remote code execution vulnerability in UCB component of Mitel MiVoice Connect before 19.1 SP1 could allow an unauthenticated remote attacker to execute arbitrary scripts due to insufficient validation of URL parameters. A successful exploit could allow an attacker to gain access to sensitive...

SQL Injection Vulnerability in Joomla! simpleMembership Component

Joomla! simpleMembership is a flexible, simple tool for managing memberships and subscriptions. An SQL injection vulnerability exists in the Joomla! simpleMembership component, which can be exploited by an attacker to obtain sensitive information about a database...

Envoy and Istio Information Disclosure Vulnerabilities

Envoy is an open source distributed proxy server.Istio is an open platform for connecting, managing and securing microservices. An information disclosure vulnerability exists in Istio 1.5.1 and earlier versions and Envoy 1.14.1 and earlier versions. An attacker can exploit the vulnerability to...

Shanghai Danfan Network Technology Co., Ltd. builds website system with SQL injection vulnerability (CNVD-2020-26367)

Huaxia chemical website building system is founded by Shanghai Danfan network science and technology limited company, is for the chemical industry to provide security, high efficiency, multi-function, system supporting B2B electronic commerce platform professional website. Shanghai Danfan network...

ShopsN open source mall system SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system SQL injection vulnerability ,...

WordPress Tickera plugin <= 3.4.6.7 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Florian Hauser in WordPress Tickera plugin versions = 3.4.6.7. Solution Update the WordPress Tickera plugin to the latest available version at least 3.4.6.9...

Tickera WordPress Event Ticketing < 3.4.6.9 - Unauthenticated Sensitive Data Exposure

Due to missing authorization controls in the "admininit" hooks, all personal data from registered users of an event could be exported into a downloadable PDF file by every unauthenticated user. The event ID could be read from the page source and/or easily enumerated in sequence. According to the...

Juniper Networks Junos OS Evolved Log Message Disclosure Vulnerability (CNVD-2020-29614)

Juniper Networks Junos OS is a Juniper Networks network operating system designed for use with Juniper Networks hardware devices. The operating system provides a secure programming interface and the Junos SDK.Junos OS Evolved is an upgraded version of Junos OS. A log information disclosure...

CVE-2020-4284

IBM Security Information Queue ISIQ 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Gitlab

It is an offensive tool for vulnerability research and education. The primary CVE ID is not explicitly mentioned, but the repository contains various vulnerable environments based on Docker-Compose, including ones for CVE-2016-9086, CVE-2017-1000353, and CVE-2018-1000006. The target product/servi...

fars.irib.ir Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1136129 Security Researcher L34RN3R Helped patch 74 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting fars.irib.ir website and its users. Following coordinate...

Synergy Systems & Solutions HUSKY RTU 6049-E70 Information Disclosure Vulnerability

Synergy Systems & Solutions HUSKY RTU 6049-E70 is a Remote Terminal Unit RTU from Synergy Systems & Solutions, India. The Synergy Systems & Solutions HUSKY RTU 6049-E70 suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...

Arbitrary File Read Vulnerability in iCMS

iCMS is a content management system built with PHP and MySQL. iCMS has an arbitrary file reading vulnerability, which can be exploited by an attacker to read any file on the server and disclose sensitive information...

Shijiazhuang Compass Network Technology Co., Ltd. website building system SQL injection vulnerability

Shijiazhuang Compass Network Technology Co., Ltd. is an Internet application service provider. Shijiazhuang Compass Networks Technology Co., Ltd. website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

CVE-2019-19000

For ABB eSOMS 4.0 to 6.0.3, the Cache-Control and Pragma HTTP headers have not been properly configured within the application response. This can potentially allow browsers and proxies to cache sensitive information...

CVE-2020-10598

In BD Pyxis MedStation ES System v1.6.1 and Pyxis Anesthesia PAS ES System v1.6.1, a restricted desktop environment escape vulnerability exists in the kiosk mode functionality of affected devices. Specially crafted inputs could allow the user to escape the restricted environment, resulting in...