1248 matches found
Multiple loopholes in the online marking system of Beijing Wuyuexin Information Technology Co.
Xin e evaluation campus version of the online marking system is Beijing Wuyue Xin company customized for the school, to create a campus-level online marking software and hardware solutions. Beijing Wuyuexin Information Technology Co., Ltd. Xin e online marking system exists overstepping the right...
bankofbeijing.com.cn XSS vulnerability
Open Bug Bounty ID: OBB-461644 Description| Value ---|--- Affected Website:| bankofbeijing.com.cn Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...
Reflective Cross-Site Scripting Vulnerability in TRS MAS infogate Plugin of Beijing Tops Information Technology Co.
TRS MAS is a universal media management system based on the characteristics of audio and video usage in the mobile Internet era. There is a reflective cross-site scripting vulnerability in the TRS MAS infogate plugin of Beijing Tops Information Technology Co. The vulnerability is due to the...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31168)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31179)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files, whi...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31166)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31176)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special doc...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31171)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files. An...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31173)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special doc...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31180)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Forms 2017 can create, modify and edit xls, xlsx files. A memory corruption vulnerability exists in Extreme Forms in Extreme Office when handling special xls files, whi...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31167)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31172)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special doc...
Extreme Office 2017 suffers from a memory corruption vulnerability (CNVD-2017-31169)
Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Writing 2017 can create, modify and edit doc, docx files. Extreme Writing in Extreme Office suffers from a memory corruption vulnerability when handling special docx...
Cross-site Scripting Vulnerability in the Employment Service Management System of Beijing Rongzhi Chuangxiang Information Technology Co.
The Employment Service Management System is an information interaction system for students, companies, faculty counselors, the Career Center, and their employers. A cross-site scripting vulnerability exists in the Employment Service Management System of Beijing Rongzhi Chuangxiang Information...
Memory Corruption Vulnerability in Storm Video 5
Storm Video 5 is a video player from Beijing Storm Technology Co. A memory corruption vulnerability exists when opening certain MP4 files in the Storm Video player, which can be exploited by attackers to cause a denial of service...
Vulnerability of the employment service management system of Beijing Rongzhi Chuangxiang Information Technology Co., Ltd. to override deletion
The Employment Service Management System is an information interaction system for students, companies, faculty counselors, the Career Center, and their employers. The Employment Service Management System of Beijing Rongzhi Chuangxiang Information Technology Co., Ltd. suffers from an override...
Beijing Hanbang Hanbanggaoke IP Camera Arbitrary Password Change Vulnerability
Beijing Hanbang Hanbanggaoke IP Camera is a network camera from China Hanbang Gaoke. A security vulnerability in the processing of requests in Beijing Hanbang Hanbanggaoke IP Camera /ISAPI/Security/users/1 could be exploited by remote attackers to submit a special request to change the...
Default credentials
On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change...
CVE-2017-14335
On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change...
CVE-2017-14335
Beijing Hanbang Hanbanggaoke IP Camera devices are affected. A vulnerability exists due to insufficient sanitization of user-controlled input, allowing a remote attacker to change the administrator password by sending a PUT request to /ISAPI/Security/users/1. The PoC demonstrates changing admin/p...