59 matches found
EUVD-2024-16765
Malicious code in bioql PyPI...
EUVD-2024-16764
Malicious code in bioql PyPI...
EUVD-2024-16766
Malicious code in bioql PyPI...
CVE-2024-0988
A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument AppUserid/AppuserToken leads to improper authentication. The explo...
CVE-2024-0989
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function delsndb of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. T...
CVE-2024-0987
A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The...
SQL Injection Vulnerability in Xunrui CMS of Sichuan Xunrui Cloud Software Development Co.
Swift CMS is a content management framework based on CodeIgniter4, which is mainly used for website construction and content management. Sichuan Xunrui Cloud Software Development Co., Ltd. Xunrui CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...
Unauthorized Access Vulnerability in Cultural AI Management System of Sichuan Cultural Big Data Co.
Sichuan Cultural Big Data Limited Liability Company is mainly engaged in big data services, data processing and storage support services, Internet data services, cloud computing equipment technology services, artificial intelligence basic resources and technology platforms, artificial intelligenc...
Sichuan Ruihu Network Technology Co., Ltd. Ruihu group control there are information leakage vulnerabilities
Sichuan Ruihu Network Technology Co., Ltd. is an innovative technology service provider focusing on hospital Internet application platform. Sichuan Ruihu Network Technology Co., Ltd. Ruihu site group control information leakage vulnerability, attackers can use the vulnerability to obtain sensitiv...
Command Execution Vulnerability in Xunrui CMS of Sichuan Xunrui Cloud Software Development Co.
Xunrui CMS is a free and open source web content management system CMS based on PHP language. Sichuan Xunrui Cloud Software Development Co., Ltd. Xunrui CMS has a command execution vulnerability that can be exploited by attackers to gain server privileges...
Denial of Service Vulnerability in XunRuiCMS of Sichuan Xunruiyun Software Development Co.
XunRuiCMS is a content management framework based on CodeIgniter4. Sichuan XunRuiCloud Software Development Co., Ltd. XunRuiCMS has a denial-of-service vulnerability that can be exploited by an attacker to cause the contents of a file to be emptied, resulting in a denial of service...
New Leak Shows Business Side of China’s APT Menace
A new data leak that appears to have come from one of Chinas top private cybersecurity firms provides a rare glimpse into the commercial side of Chinas many state-sponsored hacking groups. Experts say the leak illustrates how Chinese government agencies increasingly are contracting out foreign...
CVE-2024-0989
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function delsndb of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. T...
Path traversal
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function delsndb of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. T...
CVE-2024-0989
CVE-2024-0989 affects Sichuan Yougou Technology KuERP up to v1.0.4. The del_sn_db function in /application/index/controller/Service.php processes the file argument leading to path traversal (example '../filedir'). The exploit has been disclosed publicly. Impact per CVSSv3.1: Network, no user inte...
CVE-2024-0989 Sichuan Yougou Technology KuERP Service.php del_sn_db path traversal
A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function delsndb of the file /application/index/controller/Service.php. The manipulation of the argument file leads to path traversal: '../filedir'. T...
CVE-2024-0987
A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The...
CVE-2024-0988
A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument AppUserid/AppuserToken leads to improper authentication. The explo...
Design/Logic Flaw
A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation leads to improper output neutralization for logs. The exploit has been disclosed to the public and may be used. The...
Authentication flaw
A vulnerability classified as critical was found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this vulnerability is the function checklogin of the file /application/index/common.php. The manipulation of the argument AppUserid/AppuserToken leads to improper authentication. The explo...