Weak Password Vulnerability in NetGuard Firewall of Beijing NetGuard Cloud Information Technology Co.

Netnifty Firewall System V3.0PowerV6000 is a firewall product independently developed by Netnifty Nebula. It adopts the innovative VSP Versatile Security Platform universal security platform, which perfectly combines real-time operating system, network processing, security applications and other...

Logical flaws exist in the dual-control platform for production safety of Beijing Baixinan Technology Co.

Beijing Baixinan Technology Co., Ltd. is a high-tech enterprise dedicated to the construction of informationization, intelligentization and emergency management platform. A logic flaw exists in the dual-control platform of Beijing Baixin Security Technology Co., Ltd. that can be exploited by an...

SQL Injection Vulnerability in Dual-Control Platform for Safety Production of Beijing Baixinan Technology Co.

Beijing Baixinan Technology Co., Ltd. is a high-tech enterprise dedicated to the construction of informationization, intelligentization and emergency management platform. There is a SQL injection vulnerability in the dual-control platform of Beijing Baixin Security Technology Co., Ltd. that can b...

XSS Vulnerability in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co.

Ltd. specializes in the research, development and integration of one card system and campus payment platform. An XSS vulnerability exists in the Campus Payment Platform of Beijing Dike Yuanwang Technology Co. An attacker can exploit this vulnerability to obtain sensitive information...

China's Sway Over Tech Companies Tested with Apple, Blizzard

At least two American tech companies, Apple and gaming giant Blizzard, have come under fire – from different quarters – for wading into waters surrounding the Hong Kong protests that have been ongoing since June. The situation is shaping up to be a test for the American tech sector’s commitment t...

File Upload Vulnerability in Beijing Century Sunflower Streaming Media Service System (KMS 3.0) up***.php Page

Beijing Century Sunflower Streaming Media Service System KMS 3.0 is an audio and video application platform based on IP network, integrating live broadcasting system, video-on-demand system, video broadcasting system, as well as sub-systems such as data distribution and business management. A fil...

File Containment Vulnerability in Website Building System of Beijing Zhengmeng Network Technology Co.

Beijing positive amount of network technology limited company positive amount of network, is based on cloud computing enterprise electronic bidding and procurement and supply chain cooperative management overall solution provider. Beijing positive amount of network technology limited company...

File Upload Vulnerability in Multimedia Management Platform of Beijing Tecbeth Technology Co.

Ltd. is a B2B e-commerce platform for digital products, pioneering the information service model. A file upload vulnerability exists in the multimedia management platform of Beijing Tekbest Technology Co. The vulnerability allows an attacker to upload a webshell and gain server privileges...

SQL Injection Vulnerability in the Website Building System of Beijing Dongyunchuangda Technology Co.

Beijing Dongyuntranda Technology Co., Ltd Dongyuntranda is a domestic mobile Internet application service provider with subsidiaries in Tianjin and Xi'an. Based on the cloud computing model, Dongyuntranda focuses on well-known enterprises in Beijing, Tianjin, Shanghai and domestic and foreign...

Weak password vulnerability in NetGuard Operations and Maintenance Security Gateway V3.0 at Beijing NetGuard Cloud Information Technology Co.

Netnifty O&M Security Gateway is a compliance management system for controlling and auditing user O&M operations in business environments. A weak password vulnerability exists in the Netnifty Operations and Maintenance Security Gateway of Beijing Netnifty Nebula Information Technology Company...

Weak Password Vulnerability in Tianqing Intrusion Prevention System NGIPS of Beijing Qixingchen Information Security Technology Co.

SkyQuest Intrusion Prevention System is a network-based intrusion prevention product independently developed by Qixing, which is based on the core concept of deep defense and precise blocking. Through deep analysis of network traffic, it can accurately discover various types of intrusion attacks ...

China's APT3 Pilfers Cyberweapons from the NSA

The advanced persistent threat APT group known as APT3, which researchers across the board link to the Chinese government, has built a full in-house battery of exploits and cybertools collectively dubbed “UPSynergy.” An analysis of the toolkit has uncovered a geopolitical cat-and-mouse spy game: ...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

Weak Password Vulnerability in the System-Log Audit System of Taihe Information Security Operation Center of Beijing Qixingchen Information Security Technology Co.

TAICHI Information Security Operation Center System - Log Audit System TSOC-SA, TSOC-SA is capable of real-time collection of logs, events, alarms and other information generated by security devices, network devices, hosts, operating systems, and various application systems from different vendors...

Weak password vulnerability in Tianyue Operation and Maintenance Security Gateway (Cloud Bastion) of Beijing Qixingchen Information Security Technology Co.

Tianyue O&M Security Gateway Cloud Bastion is a compliance management system that controls and audits user O&M operations in business environments. A weak password vulnerability exists in the Tianyue Operation and Maintenance Security Gateway Cloud Bastion of Beijing Qishen Information Security...

SQL Injection Vulnerability in the Website Building System of Beijing Beyond Infinity Information Technology Co. Ltd (CNVD-2019-30355)

Beijing Beyond Infinity Information Technology is a company engaged in website construction. A SQL injection vulnerability exists in the website building system of Beijing Beyond Unlimited Information Technology Co. Attackers can utilize the vulnerability to obtain sensitive information of the...

SQL Injection Vulnerability in Beijing Yizaitong E-procurement System

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

Document Uploading Vulnerability in Beijing Yizaitong E-Procurement System

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

Beijing Yizaitong E-procurement System Has Information Leakage Vulnerabilities

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

Arbitrary File Download Vulnerability in Zhiyuan OA

Zhiyuan OA is an office system developed by Beijing Zhiyuan Internet Software Co. There is an arbitrary file download vulnerability in Zhiyuan OA, which can be exploited by attackers to download arbitrary files and obtain sensitive information...