11807 matches found
Mia Technology MIA-MED Security Vulnerability
Mia Technology MIA-MED is a hospital management system from Mia Technology. A security vulnerability exists in Mia Technology MIA-MED versions prior to 1.0.14 that stems from an improper restriction of excessive authentication attempts...
ZOHO ManageEngine ITOM Cross-Site Scripting Vulnerability
ZOHO ManageEngine ITOM is a network management software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine ITOM that stems from a stored cross-site scripting vulnerability...
CVE-2024-37678
Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-37678
Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v.8.0 and before allows a remote attacker to execute arbitrary code via a crafted script...
Mia Technology MIA-MED Encryption Issue Vulnerability
Mia Technology MIA-MED is a hospital management system from Mia Technology. A cryptographic issue vulnerability exists in Mia Technology MIA-MED versions prior to 1.0.14 that stems from the presence of a corrupt or dangerous cryptographic algorithm that allows signature spoofing via improper...
CVE-2024-37678
CVE-2024-37678 describes a Cross Site Scripting vulnerability in Hangzhou Meisoft Information Technology Co., Ltd. Finesoft v8.0 and earlier. The flaw allows a remote attacker to execute arbitrary code via a crafted script. The affected product is Finesoft (version 8.0 and before); the underlying...
Security Bulletin: IBM Storage Insights is vulnerable to weaknesses related to IBM® SDK, Java™ Technology Edition
Summary Vulnerabilities in IBM® SDK, Java™ Technology Edition may affect IBM Storage Insights which could allow a remote attacker to cause high confidentiality impact and high integrity impact. CVE-2024-20952, CVE-2024-20918, CVE-2024-20921, CVE-2024-20919, CVE-2024-20926, CVE-2024-20945,...
[SECURITY] Fedora 40 Update: tomcat-9.0.89-1.fc40
Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...
ExCobalt Cyber Gang Targets Russian Sectors with New GoRed Backdoor
Russian organizations have been targeted by a cybercrime gang called ExCobalt using a previously unknown Golang-based backdoor known as GoRed. "ExCobalt focuses on cyber espionage and includes several members active since at least 2016 and presumably once part of the notorious Cobalt Gang,"...
Command Execution Vulnerability in RG-UAC Ruijie Unified Internet Behavior Management and Audit System of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-32517)
Beijing StarNet Ruijie Network Technology Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage and so on. A command execution vulnerability exists ...
Information leakage vulnerability exists in SpringBlade of Shanghai Bred Technology Co.(CNVD-2024-32513)
SpringBlade is a microservices architecture upgraded and optimized from a commercial-grade project. Ltd. SpringBlade has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2024-33335
SQL Injection vulnerability in H3C technology company SeaSQL DWS V2.0 allows a remote attacker to execute arbitrary code via a crafted file...
Logic Flaw Vulnerability in WAF-WEB Application Protection System of Beijing Shenzhou Green Alliance Technology Co.
Beijing Shenzhou Green Alliance Technology Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application services. Ltd. WAF-WEB Application Protection System has a logic flaw vulnerability, which can be exploited by attackers to obtain sensitive information, add...
UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in Long-Term Spying
The China-nexus cyber espionage actor linked to the zero-day exploitation of security flaws in Fortinet, Ivanti, and VMware devices has been observed utilizing multiple persistence mechanisms in order to maintain unfettered access to compromised environments. "Persistence mechanisms encompassed...
DEBIAN-CVE-2024-38606
In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adfsendadmintlstart enables the telemetry TL feature on a QAT device by sending the ICPQATFWTLSTART message to the firmware. This triggers the FW to start writing TL...
SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co. Ltd (CNVD-2024-31573)
UFIDA NC is a large erp enterprise management system and e-commerce platform. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...
User Registration And Management System 3.2 SQL Injection
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ .:. Exploit Title User Registration & Management System - SQLi .:. Google Dorks .:. inurl:loginsystem/index.php .:. Date: June 18, 2024 .:. Exploit Author: bRpsd .:. Contact: cyatlive.no .:. Vendor - https://phpgurukul.com/ .:...
Command Execution Vulnerability in UHarden of Unisys Software Technology Co.
UHarden is a security suite for Unisys UOS Server Edition. A command execution vulnerability exists in UHarden, which can be exploited by attackers to gain server privileges...
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to IBM Java SDK (CVE-2024-38264)
Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to a denial of service due to IBM Java SDK, Java Technology Edition. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-38264 DESCRIPTION: The IBM SDK, Jav...