Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

GraphQL behaviour Nested fragment in GraphQL might be quite hard to handle depending on the implementation language. Some language support natively a max recursion depth. However, on most compiled languages, you should add a threshold of recursion. graphql Infinite loop example query ...a fragmen...

MAL-2022-6085 Malicious code in shiba-inu-technologies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be0e17205a55c4159c2077a1a4ec77b22f82254b9288dc3eccc349af3d498b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shiba-inu-technologies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware be0e17205a55c4159c2077a1a4ec77b22f82254b9288dc3eccc349af3d498b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Honeywell Safety Manager

1. EXECUTIVE SUMMARY CVSS v3 7.7 ATTENTION: Exploitable remotely/low attack complexity Vendor: Honeywell Equipment: Safety Manager 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow for configuration and firmware manipulation or remote code execution. 3. TECHNICAL...

Marty Marketplace Multi Vendor Ecommerce Script 1.2 SQL Injection Vulnerability

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

Honeywell Saia Burgess PG5 PCD

1. EXECUTIVE SUMMARY CVSS v3 7.6 ATTENTION: Exploitable on adjacent network/low attack complexity Vendor: Honeywell Equipment: Saia Burgess PG5 PCD Vulnerabilities: Authentication Bypass, Use of a Broken or Risky Cryptographic Algorithm CISA is aware of a public report known as “OT:ICEFALL” that...

Marty Marketplace Multi Vendor Ecommerce Script 1.2 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

Ambit Technologies Itech Movie Portal Script SQL注入漏洞

Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. An SQL injection vulnerability exists in Ambit Technologies Itech Movie Portal Script version 7.36, which stems from an unknown function in shownews.php, where manipulation of the parameter id can...

Ambit Technologies Itech Movie Portal Script SQL注入漏洞

Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. Ambit Technologies Itech Movie Portal Script version 7.36 suffers from a SQL injection vulnerability that stems from unknown code in artist-display.php, where manipulation of the parameter act can...

Ambit Technologies Itech Movie Portal Script SQL注入漏洞

Ambit Technologies Itech Movie Portal Script is a Movie Portal Script from Ambit Technologies, USA. An SQL injection vulnerability exists in Ambit Technologies Itech Movie Portal Script version 7.36, which stems from unknown code in movie.php, where manipulation of the parameter f can lead to SQL...

Ambit Technologies iTech B2B Script SQL注入漏洞

Ambit Technologies iTech B2B Script is a B2B e-commerce system script from Ambit Technologies, India. Ambit Technologies iTech B2B Script version 4.28 suffers from a SQL injection vulnerability that stems from the presence of an insecure file, subpage.php, which can be exploited by an attacker to...

Ambit Technologies iTech Auction Script SQL注入漏洞

Ambit Technologies iTech Auction Script is a popular and cost-effective solution from Ambit Technologies India for launching your auction website. Ambit Technologies iTech Auction Script version 6.49 suffers from a SQL injection vulnerability that stems from the presence of an insecure file...

Ambit Technologies iTech Real Estate Script SQL注入漏洞

Ambit Technologies iTech Real Estate Script is an intelligent PHP script by Ambit Technologies India. Properties for sale and rent can be listed using the edit option to edit property details. Ambit Technologies iTech Real Estate Script version 3.12 suffers from a SQL injection vulnerability that...

Ambit Technologies iTech Job Portal Script 授权问题漏洞

Ambit Technologies iTech Job Portal Script is an efficient interactive platform from Ambit Technologies India. One can post their vacancy profile on one side and candidates can post their resume on the other side. Ambit Technologies iTech Job Portal Script version 9.13 suffers from a security...

Ambit Technologies iTech Freelancer Script SQL注入漏洞

Ambit Technologies iTech Freelancer Script is a popular and cost-effective solution from Ambit Technologies India for launching your freelancer website. Ambit Technologies Itech Freelancer Script version 5.13 suffers from a security vulnerability that stems from the presence of unknown...

Ambit Technologies iTech Classifieds Script SQL注入漏洞

Ambit Technologies iTech Classifieds Script is a popular and cost-effective solution from Ambit Technologies India for launching your classified ads website. Ambit Technologies iTech Classifieds Script version 7.27 suffers from a SQL injection vulnerability that stems from the presence of an...

Ambit Technologies iTech Dating Script SQL注入漏洞

Ambit Technologies iTech Dating Script is a standalone PHP based software script by Ambit Technologies India. It provides users with an excellent experience when looking for a date! A security vulnerability exists in Ambit Technologies iTech Dating Script version 3.26, which stems from the presen...

Ambit Technologies iTech Multi Vendor Script SQL注入漏洞

Ambit Technologies iTech Multi Vendor Script is a popular and cost-effective solution from Ambit Technologies India to launch your e-commerce website. A security vulnerability exists in Ambit Technologies iTech Multi Vendor Script version 6.49, which stems from the presence of the insecure file...

5 Key Things We Learned from CISOs of Smaller Enterprises Survey

New survey reveals lack of staff, skills, and resources driving smaller teams to outsource security. As business begins its return to normalcy however "normal" may look, CISOs at small and medium-size enterprises 500 – 10,000 employees were asked to share their cybersecurity challenges and...

HCL Technologies HCL Launch Information Disclosure Vulnerability (CNVD-2022-58411)

HCL Technologies HCL Launch is a versatile, enterprise-grade continuous delivery automation software from HCL Technologies, India. for handling the most complex deployment processes in DevOps. HCL Technologies HCL Launch suffers from an information disclosure vulnerability that stems from the...