601 matches found
SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2021-14897)
Inner Mongolia Hohai Trade Co., Ltd. to enterprises and institutions for the construction of information technology. Mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection...
XSS Vulnerability in the Website Building System of Inner Mongolia Haohai Trading Co.
Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is an XSS vulnerability in the website building system of Inner Mongolia Hohai Trading Co. Attackers can use the vulnerability to obtain...
SQL Injection Vulnerability in the Website Building System of Inner Mongolia Hohai Trading Co. Ltd (CNVD-2021-14898)
Inner Mongolia Hohai Trade Co., Ltd. to enterprises and institutions for the construction of information technology. Mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection...
Command Execution Vulnerability in Hualin Securities Online Trading System
Hualin Securities Online Trading System is a trading software designed for Hualin Securities investors. A command execution vulnerability exists in Hualin Securities Online Trading System, which can be exploited by an attacker to gain server control privileges...
Command Execution Vulnerability in Huaan Securities Online Trading Software
hereinafter referred to as "Hua An Securities" was approved by the China Securities Regulatory Commission on December 28, 2000 was incorporated as a securities company, formerly known as the May 1991 establishment of the Anhui Provincial Securities Company, with a registered capital of 2.821...
Command Execution Vulnerability in Huaan Securities Hang Seng Investment Winner Quotes Trading Software
Huaan Securities Investment Winner is by Huaan Securities using mobile communication networks, the Internet and other advanced means of communication, Huaan Securities Investment Winner for shareholders to provide stock quotes, online stock trading and information browsing and other functions...
The many ways you can be scammed on Facebook, part II
In part 1 of this article series, we looked at data mining schemes, scam ad campaigns, concert tickets scams, and PayPal fund transfer scams. Today, we continue to list down the other scams you might encounter on Facebook. Bitcoin trading scam Who would have thought that a "simple" phishing schem...
Authorities disrupt massive stolen credit card trading scam on dark web
By Deeba Ahmed Dubbed Carding Action 2020; the operation aimed at targeting several dark web marketplaces resulting in saving $48million/€40 million. This is a post from HackRead.com Read the original post: Authorities disrupt massive stolen credit card trading scam on dark web...
comtrade.tradingeconomics.com Cross Site Scripting vulnerability OBB-1452415
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
murex-trading.com Cross Site Scripting vulnerability OBB-1416154
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL injection vulnerability in co***.php page of website building system of Inner Mongolia Hohai Trading Co.
Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the co.php page of the website building system of Inner Mongolia Hohai Trading Co. An attacker can u...
suntrading.co.kr Cross Site Scripting vulnerability OBB-1400676
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
SQL injection vulnerability in ab***.php page of website building system of Inner Mongolia Hohai Trading Co.
Ltd. is mainly engaged in e-commerce, website construction, software development, computer promotion and application of information construction services. There is a SQL injection vulnerability in the ab.php page of the website building system of Inner Mongolia Hohai Trading Co. An attacker can u...
CVE-2020-5778
A flaw exists in Trading Technologies Messaging 7.1.28.3 ttmd.exe due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate...
CVE-2020-5779
A flaw in Trading Technologies Messaging 7.1.28.3 ttmd.exe relates to invalid parameter handling when calling strcpys with an invalid parameter i.e., a long src string parameter as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe...
CVE-2020-5779
A flaw in Trading Technologies Messaging 7.1.28.3 ttmd.exe relates to invalid parameter handling when calling strcpys with an invalid parameter i.e., a long src string parameter as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe...
CVE-2020-5778
A flaw exists in Trading Technologies Messaging 7.1.28.3 ttmd.exe due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate...
Design/Logic Flaw
A flaw in Trading Technologies Messaging 7.1.28.3 ttmd.exe relates to invalid parameter handling when calling strcpys with an invalid parameter i.e., a long src string parameter as a part of processing a type 4 message sent to default TCP RequestPort 10200. It's been observed that ttmd.exe...
Input validation
A flaw exists in Trading Technologies Messaging 7.1.28.3 ttmd.exe due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate...
CVE-2020-5779
Affected software: Trading Technologies Messaging 7.1.28.3 (ttmd.exe) Vulnerability detail: A flaw in invalid parameter handling when calling strcpy_s() with an invalid parameter (long src string) while processing a type 4 message sent to the default TCP port 10200, leading to ttmd.exe terminatio...