Logic flaws exist in the YiYu enterprise building system vulnerability

Eyou content management system EyouCms belongs to Hainan Zanzan Network Technology Co., Ltd. is the newest PHP open source website management system. EyouCms has a logic flaw vulnerability that can be exploited by attackers to tamper with other users' information...

Denial of Service Vulnerability in Hammer Tech's Nut Pro 2 Phone

The Nut Pro 2 is a new phone announced by Hammer Technology on November 7, 2017 at the 2017 Hammer Technology Fall Launch Event. A denial of service vulnerability exists in the Hammer Tech Nut Pro 2 phone, which can be exploited by an attacker to consume system and device resources, causing the...

CISA, DOE, and UK’s NCSC Issue Guidance on Protecting Industrial Control Systems

The Cybersecurity and Infrastructure Security Agency CISA, the Department of Energy DOE, and the UK's National Cyber Security Centre NCSC have released Cybersecurity Best Practices for Industrial Control Systems, an infographic providing recommended cybersecurity practices for industrial control...

Build support for open source in your organization

Have you ever stared at the same lines of code for hours only to have a coworker identify a bug after just a quick glance? That’s the power of community! Open source software development is guided by the philosophy that a diverse community will produce higher quality code by allowing anyone to...

Security Bulletin: Vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020

Summary There are vulnerabilities in IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 us by IBM Streams. IBM Streams has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated attacker ...

Security Bulletin: IBM Kenexa LCMS Premier On Premise - IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 - Includes Oracle Jan 2020 CPU

Summary We have identified that the IBM Kenexa LCMS Premier is affected by one or more security vulnerabilities. These have been addressed in LCMS Premier version 14.0 Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0...

Security Bulletin: IBM Kenexa LMS On Premise - IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 - Includes Oracle Jan 2020 CPU (CVE-2019-4732)

Summary We have identified that the IBM Kenexa LMS On Premise is affected by one or more security vulnerabilities. These have been addressed in LMS 6.1.0 version. Vulnerability Details CVEID: CVE-2019-4732 DESCRIPTION: IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0...

SQL Injection Vulnerability in Mcms of Jingdezhen Mingfei Technology Co.

Mcms is a J2EE system. Jingdezhen Mingfei Technology Co., Ltd Mcms has a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information from the database...

Stone Technology Opinion Analysis Assistant suffers from SQL Injection Vulnerability

Stone Technology Public Opinion Analysis Assistant is a program that monitors in a cyclical manner, collects the titles of publicly released information from designated websites at the first time, screens out the information and links required by users based on keywords and filters, and prompts t...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Rational Application Developer for WebSphere Software

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 that are used by IBM Rational Application Developer for WebSphere Software. IBM Rational Application Developer for WebSphere Software has addressed the applicable CVEs. Vulnerability Details CVEID:...

[SECURITY] Fedora 31 Update: perl-Mojolicious-8.42-1.fc31

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

[SECURITY] Fedora 30 Update: perl-Mojolicious-8.42-1.fc30

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

[SECURITY] Fedora 32 Update: perl-Mojolicious-8.42-1.fc32

Back in the early days of the web there was this wonderful Perl library called CGI, many people only learned Perl because of it. It was simple enough to get started without knowing much about the language and powerful enough to keep you going, learning by doing was much fun. While most of the...

SQL Injection Vulnerability in Stone Technology Online Exam System Frontend

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores...

SQL injection vulnerability in the kg***_cj***.php page of Stone Technology's online examination system (CNVD-2020-32530)

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores...

Unauthorized Access Vulnerability in Stone Technology's Opinion Analysis Assistant us***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. An unauthorized access vulnerability exists in the...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant ru***_dl***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the Stone...

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant wl***_fg***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the wlfg.p...

SQL Injection Vulnerability in Stone Technology Online Exam System kg***_tk***.php Page

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores. S...

SQL Injection Vulnerability in Stone Technology Online Exam System ks***_sj***.php Page

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores...