Bio Star 2.8.2 Local File Inclusion

Exploit Title: Bio Star 2.8.2 - Local File Inclusion Authors: SITE Team Rian Saaty, Bashaer AlHarthy, Safeyah Alhazmi Google Dork: N/A Date of Exploit Release: 2020-07-13 Exploit Author: SITE Team Vendor Homepage: https://www.supremainc.com/en/main.asp Software Link:...

SQL injection vulnerability in n***.php file of website building system of Anyang Zhidao Media Co.

Founded in 2011, Anyang Zhidao Media Co., Ltd. is a formal and professional Anyang network company engaged in Internet business and software development. Anyang Zhidao Media Co., Ltd. building system n.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database...

SQL injection vulnerability in p***.php file of website building system of Anyang Zhidao Media Co.

Founded in 2011, Anyang Zhidao Media Co., Ltd. is a formal and professional Anyang network company engaged in Internet business and software development. Anyang Zhidao Media Co., Ltd. building system p.php file SQL injection vulnerability, attackers can use the vulnerability to obtain database...

staralliance.com Cross Site Scripting vulnerability OBB-1227278

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

PT-2020-14145 · Suprema · Suprema Biostar 2

Name of the Vulnerable Software and Affected Versions: Suprema BioStar 2 versions prior to 2.8.2 Description: An issue in the Video Extension allows remote attackers to read arbitrary files from the server via Directory Traversal. This enables unauthorized access to sensitive information on the...

SQL injection vulnerability in ab***.php page of website building system of Hefei Yilang Network Technology Co.

Hefei One Wave Network Technology Co., Ltd. is a network design company. Hefei One Wave Network Technology Co., Ltd. website building system ab.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Se***.asp Page of Website Building System of Century Star Network Information Service Co.

Century Star Network Information Service Co., Ltd. is a company that provides customers with high-quality website construction services and branded Internet marketing services. Century Star Network Information Service Co., Ltd. website building system Se.asp page SQL injection vulnerability,...

Century Star Network Limited website builder system suffers from SQL injection vulnerability

Century Star Network was founded in October 2004, mainly engaged in brand website construction, promotion service providers, for growing enterprises to provide one-stop information network marketing solutions. There is a SQL injection vulnerability in Century Star Network Limited's website buildi...

sun-star-st.jp Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1179308 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

libreoffice:ww6fuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5948909376765952 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: ww6fuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Address...

starwars.fandom.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1174819 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-13149

Dragon Center (MSI) on MSI Gaming laptops is affected by CVE-2020-13149 due to weak ACLs on the %PROGRAMDATA%\MSI\Dragon Center folder in versions before 2.6.2003.2401. A local authenticated attacker can overwrite system files and escalate privileges, with attack approaches including replacing th...

libreoffice:xlsxfuzzer: Segv on unknown address in com::sun::star::uno::BaseReference::iquery

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5750470976208896 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: xlsxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Segv on unknown address Crash Addres...

Micro Star MSI True Color Code Issue Vulnerability

Micro Star MSI True Color is a color calibration application from Micro Star Technology Micro Star of Taiwan, China. A code issue vulnerability exists in Micro Star MSI True Color versions prior to 3.0.52.0. An attacker can exploit the vulnerability to elevate privileges to SYSTEM...

Unauthorized Access Vulnerability in Superstar Huiya E-Books

Super Star Huiya eBooks is currently the world's largest Chinese online digital library, providing a large number of eBook resources for reading, including literature, economics, computers, and more than 50 categories. Unauthorized access vulnerability exists in Super Star Huiya eBooks, which can...

SQL Injection Vulnerability in Star eBook Platform

Star eBook platform is a comprehensive service platform integrating "copyright management, new book release, eBook purchase, sales, lending and knowledge discovery". A SQL injection vulnerability exists in the eBook Platform, which can be exploited by attackers to obtain sensitive information fro...

SQL injection vulnerability in cp***.php file of website building system of Henan Lisuo Internet Information Technology Co.

Henan Liso Networks is a website construction company that designs and develops websites for many companies based on customized development of user needs. Henan Lisuo Internet Information Technology Co., Ltd. building system cp.php file SQL injection vulnerability, an attacker can use the...

Sifter - A OSINT, Recon And Vulnerability Scanner

Sifter is a osint, recon & vulnerability scanner. It combines a plethara of tools within different module sets in order to quickly perform recon tasks, check network firewalling, enumerate remote and local hosts, and scan for the 'blue' vulnerabilities within microsft and if unpatched, exploit...

Flying FishStar Internet Behavior Management Router Has Weak Password Vulnerability

Chengdu Flying Fish Star Technology Co., Ltd. is a value-added service company that serves enterprise, business and home users with smart and easy-to-use network communication management devices and innovative technologies. A weak password vulnerability exists in Flyingfish Star Internet Behavior...

The US Space Force Has a Rough Launch on the Internet

From controversy over camo print to Star Trek comparisons, the new military branch can't buy a break online...