Addressing cybersecurity risk in industrial IoT and OT

As the industrial Internet of Things IIoT and operational technology OT continue to evolve and grow, so too, do the responsibilities of the Chief Information Security Officer CISO. The CISO now needs to mitigate risks from cloud-connected machinery, warehouse systems, and smart devices scattered...

CVE-2020-14854

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructu...

CVE-2020-14802

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: PIA Core Technology. Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Design/Logic Flaw

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructu...

CVE-2020-14854

CVE-2020-14854 affects Oracle Hyperion Infrastructure Technology UI and Visualization (affected 11.1.2.4). Vulnerability allows a high-privileged attacker with network access via HTTP to compromise data with user interaction required; impact to confidentiality and integrity is indicated (CVE CVSS...

CVE-2020-14854

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructu...

CVE-2020-14854

Vulnerability in the Hyperion Infrastructure Technology product of Oracle Hyperion component: UI and Visualization. The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Infrastructu...

CVE-2020-14795

CVE-2020-14795 affects Oracle PeopleSoft Enterprise PeopleTools PIA Core Technology (validated on PeopleSoft 8.57 and 8.58). The vulnerability enables unauthenticated remote access via HTTP, with user interaction required, potentially leading to unauthorized access to sensitive data or complete a...

Unauthorized Access Vulnerability in YN Smart Campus of Chengdu Enable Technology Co.

Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. Chengdu Enable Technology Co., Ltd YN Smart Campus has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Netcommerce Technology's Website Building System

Founded in 2015, Netcommerce Technology focuses on the innovation and integration of digital marketing technology, products, resources and services to provide customers with comprehensive digital innovation services and help traditional enterprises quickly realize the transformation and upgrading...

Command Execution Vulnerability in Qiji Fortress v5.0 at Zhejiang Qiji Technology Co. Ltd (CNVD-2020-59414)

Qiji Technology is a product-based company founded by O&M management experts and focused on O&M operations. A command execution vulnerability exists in Zhejiang Qiji Technology Co. Qiji Fortress v5.0, which can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in Qiji Fortress v5.0 at Zhejiang Qiji Technology Co. Ltd (CNVD-2020-59415)

Qiji Technology is a product-based company founded by O&M management experts and focused on O&M operations. A command execution vulnerability exists in Zhejiang Qiji Technology Co. Qiji Fortress v5.0, which can be exploited by an attacker to gain server control privileges...

Security Bulletin: Multiple vulnerabilities in the IBM SDK, Java Technology Edition affects IBM Performance Management products Q3 2020

Summary IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability Q3 2020 Vulnerability Details CVEID: CVE-2020-2590 DESCRIPTION: An unspecified vulnerability in Java SE related to the Java SE Security component could allow an...

Command Execution Vulnerability in Followers (Windows Client)

Beijing Hundred Technology Group Limited is an Internet education technology company. A command execution vulnerability exists in Followers Windows client, which can be exploited by an attacker to gain control of the server...

FAQ: Citrix Secure Hub for Mobile Devices and MicroVPN Technology

Citrix Endpoint Management, using technology formerly called XenMobile This article contains frequently asked questions about MicroVPN with XenMobile App or Enterprise editions and NetScaler Gateway deployments. Q: What are the recommended versions of components for MicroVPN? Q: What is MicroVPN?...

Engel & Völkers Technology GmbH: Debug information at the /sapi endpoint

Summary: Sending a GET request to www.engelvoelkers.com/sapi and the server responds with a 500 Internal Server Error which yields a stack trace. Steps To Reproduce: - Enter www.engelvoelkers.com/sapi into your web browser and you can see the stacktrace. https://bugpoc.com/pocbp-VPZDeo2Z I will...

SQL Injection Vulnerability in Liangshi Online School System of Wuhan Liangshi Online Education Technology Co.

Wuhan Liangshi Online Education Technology Co., Ltd. is headquartered in Wuhan City, which is the thoroughfare of nine provinces, and is a high-tech enterprise restructured and established by the Education and Information Technology Center of Optics Valley Computer School. There is a SQL injectio...

File Upload Vulnerability in Shenzhen Bangming Technology Co.

Build Manager is a multi-language enterprise website building system. There is a file upload vulnerability in Shenzhen Bangming Technology Co. Attackers can use this vulnerability to obtain server privileges...

Anhui Huanmei Intelligent Technology Co., Ltd. pollution source online monitoring system has SQL injection vulnerability

Anhui Huanmei Intelligent Technology Co., Ltd. was founded in May 2007, and its business scope includes computer hardware and software, network products, communication products, communication products and so on. Anhui Huanmei Intelligent Technology Co., Ltd. has a SQL injection vulnerability in i...

Command Execution Vulnerability in Intercommunication of Guangdong Tianchen Network Technology Co.

HootSuite PC is a software for data backup and recovery, computer screen casting, game key mapping, and file transfer between cell phones and computers. A command execution vulnerability exists in Guangdong Tianchen Network Technology Co. An attacker can exploit this vulnerability to create an...