Information leakage vulnerability of Hangzhou Huisuo Technology Co.

Hangzhou Huisuo Technology Co., Ltd. was founded in 2010, the scope of business includes: technical services, technology development, technology consulting, technology exchanges, technology transfer, technology promotion; software development; information technology consulting services; network...

SQL Injection Vulnerability in Website Building System of Heilongjiang Ligao Technology Co.

Heilongjiang Ligao Technology Co., Ltd. is a company that provides safe food production and quality control solutions for food companies. A SQL injection vulnerability exists in the website building system of Heilongjiang Ligao Technology Co. Ltd, which can be exploited by attackers to obtain...

Unauthorized access vulnerability in the website building system of Jiangsu Wolye Software Co.

Jiangsu Wo Ye Software Co., Ltd. focuses on auditing, housing construction, transportation, municipal, high-speed rail, safety supervision, water conservancy, farmland renovation, river lake long system, major projects, investment promotion, big visit, archives, Zanxue.com, the seven-color sheep...

MTN Group: Remote code execution due to unvalidated file upload

Summary: Hello I found a critical vunerability in one of your site, where user can upload any file type as a profile picture including php file Steps To Reproduce: 1. Visit https://careers.mtn.cm and register as a user. 2. After successful registration, login and update your data. 3. When uploadi...

Python Bleach 跨站脚本漏洞

Python Bleach is a Python based HTML cleanup library. Python Bleach suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trigger cross-site scripting in order to run JavaScript code in the context of a website...

The vulnerability of the WordPress website content management system, related to deficiencies in access control for certain functions, allows attackers to compromise data integrity.

The vulnerability of the WordPress website content management system is related to deficiencies in restricting access to certain functions. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...

SQL Injection Vulnerability in the Website Building System of Shanghai Cai Sheng Information Technology Co.

Shanghai Cai Sheng Information Technology Co., Ltd abbreviated as: "Cai Sheng Planning" was founded in 2005, is a digital marketing as the core of the integrated marketing services company. There is a SQL injection vulnerability in the website building system of Shanghai CaiSheng Information...

SQL Injection Vulnerability in the Website Building System of Shenzhen Tiandixin Network Technology Company Limited (CNVD-2021-24704)

The business scope of Shenzhen Tiandixin Network Technology Co., Ltd. includes: network technology development, graphic design, LOGO design, corporate image planning and so on. Shenzhen Tiandixin Network Technology Co., Ltd. has a SQL injection vulnerability in its website system, which can be...

SQL Injection Vulnerability in One Zero Technology's Website Building System

Zero-One Technology Ren is a business intelligence solutions provider that integrates consulting, professional services and product marketing. A SQL injection vulnerability exists in the website building system of ZeroOne Technology, which can be exploited by attackers to obtain sensitive...

Shenzhen Zero-One Information Technology Co., Ltd. website building system SQL injection vulnerability

Shenzhen Zero-One Information Technology Co., Ltd. is a business intelligence solution provider integrating consulting, professional services and product marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zero One Information Technology Co. Attackers can...

SQL injection vulnerability in pr***.asp page of website building system of Ruian UB Technology Co.

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

SQL Injection Vulnerability in the Website Building System of Anhui Fishing Blue Education Software Technology Co.

Anhui Fishing Blue Education Software Technology Co., Ltd. is a science and technology enterprise specializing in secondary vocational education technology research and education informatization software research and development. There is a SQL injection vulnerability in the website building syst...

QIWI: crlf injection на https://bug.qiwi.com

звдравствуйте. я нашел crlf injection на https://bug.qiwi.com. спомошъю этого злоумышленник может установить новые заголовки и cookie загрезняя кэш инфа: site: https://bug.qiwi.com path: /landing/ payload: /%0d%0aSet-Cookie:MyHeader=value PoC:...

Xiamen Eltong Network Technology Co., Ltd. website building system SQL injection vulnerability

Xiamen Eltong Network Technology Co., Ltd. was founded on April 13, 2005, the scope of business includes computer network technology services; computer application software sales and development, etc.. Xiamen Eltong Network Technology Co., Ltd. website building system has a SQL injection...

Doppler VDP: Access page must be reloaded to perform multiple requests

Hello team, I have found a authorization issues in your website. With this issue Low privileged user's like collaborator users can still access DEV environment even workplace owner unchecked dev access permission from owner account. With this issue collaborator user can unlimited access that dev...

MTN Group: Developer Mistake

Check this path https://mtn.cm/components/ Impact Admin Mistake...

SQL Injection Vulnerability in the Website System of Tianjin Guide Car Intelligent Equipment Co.

Tianjin Guide Car Intelligent Equipment Co., Ltd. is a modern high-tech company integrating sales of instrumentation products, engineering design and management consulting. There is a SQL injection vulnerability in the website building system of Tianjin Guidance Vehicle Intelligent Equipment Co. ...

SQL Injection Vulnerability in the Website Building System of Tiantu Construction Group Co.

Founded in 1996 with a registered capital of RMB 10 million, Tiantu Construction Group Co., Ltd TCTG has passed ISO9001 International Quality System Certification, ISO14001 Environmental Management System Certification and OHSAS8001 Occupational Health and Safety Management System Certification. ...

SQL Injection Vulnerability in the Website of Beijing Depth Space Decoration Engineering Co.

Beijing Depth Space Decoration Group, founded in 2003, is a member unit of China Building Decoration Association. The website of the branch of Beijing Depth Space Decoration Engineering Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive...

SQL injection vulnerability exists in zzzzphp (CNVD-2020-67554)

zzcms is a free website builder developed in asp language. There is a SQL injection vulnerability in zzzphp, which can be exploited by attackers to obtain sensitive database information...