File upload vulnerability in the education cloud platform of Beijing Zhongqing Modern Technology Co. Ltd (CNVD-C-2024-945978)

Beijing Zhongqing Modern Technology Co., Ltd. is a high-tech enterprise founded in 1993, specializing in providing educational users with products and solutions such as recording and broadcasting system, three classrooms and smart classrooms. A file upload vulnerability exists in the education...

XSS Vulnerability in StarRocks Database System of Beijing Mirror Boat Technology Co.

StarRocks database system is a new generation of open source extremely fast full-scene MPP database system . Beijing Mirror Boat Technology Co. StarRocks database system has an XSS vulnerability that can be exploited by attackers to obtain sensitive information such as user cookies...

File Upload Vulnerability in Education Cloud Platform of Beijing Zhongqing Modern Technology Co.

Beijing Zhongqing Modern Technology Co., Ltd. is a high-tech enterprise founded in 1993, specializing in providing educational users with products and solutions such as recording and broadcasting system, three classrooms and smart classrooms. A file upload vulnerability exists in the education...

Logic Flaw Vulnerability in Education Cloud Platform of Beijing Zhongqing Modern Technology Co.

Beijing Zhongqing Modern Technology Co. A logic flaw vulnerability exists in the education cloud platform of Beijing Zhongqing Modern Technology Co. Ltd. that can be exploited by an attacker to reset arbitrary user passwords...

CVE-2024-51114

An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the code/function/dpi/webauth/customizable.php file...

CVE-2024-51114

An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the code/function/dpi/webauth/customizable.php file...

CVE-2024-51114

An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the code/function/dpi/webauth/customizable.php file...

PT-2024-34527 · Beijing Digital China Yunke Information Technology Co.Ltd · Beijing Digital China Yunke Information Technology Co.Ltd

Name of the Vulnerable Software and Affected Versions: Beijing Digital China Yunke Information Technology Co.Ltd version 7.2.6.120 Description: An issue in Beijing Digital China Yunke Information Technology Co.Ltd allows a remote attacker to execute arbitrary code via the code/function/dpi/web...

CVE-2024-51114

Beijing Digital China Yunke Information Technology Co. Ltd. v.7.2.6.120 is affected by CVE-2024-51114. The issue allows a remote attacker to execute arbitrary code via the file code/function/dpi/web_auth/customizable.php, indicating a remote-code-execution vulnerability. The available description...

Arbitrary File Read Vulnerability in OA Collaboration Office System of Beijing Jiushi Synergy Software Co.

Founded in 2008, Beijing Jiushi Synergy Software Co., Ltd. is a high-tech and double-soft certified enterprise engaged in the research and development of informatization, digitization and intellectualization software. Beijing Jiushi Synergy Software Co., Ltd. OA collaborative office system has an...

Unauthorized Access Vulnerability in KingH5Stream of Beijing Asian Control Technology Development Co.

KingH5Stream is a live video streaming solution based on HTML5 technology. KingH5Stream by Beijing Asian Control Technology Development Co. Ltd. has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in MetaCRM6 Customer Relationship Management System of Beijing Meta Software Technology Limited (CNVD-2024-47773)

MetaCRM6 Customer Relationship Management System is an integrated, comprehensive, customer-centric business management suite. A SQL injection vulnerability exists in the MetaCRM6 Customer Relationship Management System of Beijing Meta Software Technology Co. Ltd, which can be exploited by attacke...

Command Execution Vulnerability in the Operation and Maintenance Security Management System of Beijing Shengbo Run High-Tech Co.

Beijing Shengbolun High-Tech Co., Ltd. is a high-tech enterprise focusing on network security technology research, product development and security services. A command execution vulnerability exists in the Operations and Maintenance Security Management System OMS of Beijing Saints Bright Hi-Tech...

Arbitrary File Read Vulnerability in KingPortal Development System Client of Beijing Asia Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. There is an arbitrary file reading vulnerability in the client side of KingPortal development system of Beijing Asian Control Technology Development Co., Ltd, which can be exploited b...

SQL Injection Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-46176)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

Unauthorized Access Vulnerability in Electronic Document Security Management System of Beijing Yisaitong Technology Development Co.

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

Chinese Hackers Infiltrate U.S. Internet Providers in Cyber Espionage Campaign

Nation-state threat actors backed by Beijing broke into a "handful" of U.S. internet service providers ISPs as part of a cyber espionage campaign orchestrated to glean sensitive information, The Wall Street Journal reported Wednesday. The activity has been attributed to a threat actor that...

SQL Injection Vulnerability in Human Resource Information Management System of Beijing Hongjing Century Software Company Limited (CNVD-2024-43261)

Beijing Hongjing Century Software Co. A SQL injection vulnerability exists in the human resources information management system of Beijing Hongjing Century Software Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-42247)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

SQL Injection Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-42218)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...