Arbitrary File Download Vulnerability in TongWeb of Beijing Oriental Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. Ltd. TongWeb suffers from an arbitrary file download vulnerability that can be exploited by an attacker to obtain sensitive files on the server...

Command Execution Vulnerability in SuperMap iPortal of Beijing SuperMap Software Co.

SuperMap iPortal is a GIS portal platform for cloud computing, which enables the integration, discovery, sharing and management of various GIS resources such as maps, services, scenes and data, and also monitors multiple GIS servers within the organization to ensure the safe and stable operation ...

Command Execution Vulnerability in SuperMap iServer 10i of Beijing SuperMap Software Co.

SuperMap iServer is a cloud GIS application server based on high-performance cross-platform GIS kernel. A command execution vulnerability exists in SuperMap iServer 10i of Beijing SuperMap Software Co. Ltd. that can be exploited by an attacker to gain control of the server...

Unauthorized Access Vulnerability in KingPortal Development System of Beijing Acontrol Technology Development Co.

Ltd. is an automation software platform high-tech enterprise. Ltd. KingPortal development system has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in KingFusion Development System of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. Beijing Asia Control Technology Development Co., Ltd. KingFusion development system there is an unauthorized access vulnerability, attackers can use the vulnerability to obtain...

FBI: Use a Burner Phone at the Olympics

Use a burner phone if you’re traveling to the Olympics, the FBI warned on Tuesday, lest you come home with a nasty case of malware and/or snatched personal data. The FBI didn’t mention specific threats, per se, but its alert warned those traveling to the February 2022 Beijing Winter Olympics and...

FBI Releases PIN on Potential Cyber Activities During the 2022 Beijing Winter Olympics and Paralympics

The Federal Bureau of Investigation FBI has released a Private Industry Notification PIN to warn entities associated with the February 2022 Beijing Winter Olympics and March 2022 Paralympics that malicious cyber actors could use a broad range of cyber activities to disrupt these events. These...

Command Execution Vulnerability in TongWeb Management Console (CNVD-2022-16268)

TongWeb is an application server from Beijing Orientop Technology Co. A command execution vulnerability exists in the TongWeb management console that can be exploited by an attacker to gain server control privileges...

Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks

The mobile app that all attendees and athletes of the upcoming Beijing Winter Olympics must use to manage communications and documentation at the event has a “devastating” flaw in the way it encrypts data that can allow for man-in-the-middle attacks that access sensitive user information,...

Information Leakage Vulnerability in KingPortal Running System Client of Beijing Asian Control Technology Development Co.

KingPortal developed by Beijing Asian Control Technology Development Co., Ltd. is a pure B/S architecture for industrial monitoring web-based configuration products. Ltd. KingPortal running system client information leakage vulnerability, attackers can use the vulnerability to obtain the system...

Information leakage vulnerability in KingPortal client development system of Beijing Asian Control Technology Development Co. Ltd (CNVD-2022-03682)

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. An information leakage vulnerability exists in the KingPortal client development system of Beijing Asian Control Technology Development Co. Ltd, which can be exploited by attackers to...

Command Execution Vulnerability in the Firewall of Beijing NetGuard Nebula Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

XSS Vulnerability in Learning Express Cloud Drive

Founded in 1993, Beijing Century Super Star Information Technology Development Limited Liability Company is one of the early companies in China engaged in the digitization of paper materials and the production of electronic publications. An XSS vulnerability exists in Study Pass Cloud Drive, whic...

Beijing Tongda Zhicheng Technology Co., Ltd. Heart Tongda OA has file upload vulnerability (CNVD-2021-86805)

Xin Tongda OA is an OA office tool equipped with AI artificial intelligence. Beijing Tongda Zhicheng Technology Co. Xin Tongda OA has a file upload vulnerability, which can be exploited by attackers to gain control of the server...

Unauthorized Access Vulnerability in FusionWeb Client Development System of Beijing Asian Control Technology Development Co.

Beijing Asian Control Technology Development Co., Ltd. is a high-tech enterprise of automation software platform. An unauthorized access vulnerability exists in the FusionWeb client development system of Beijing Asian Control Technology Development Co. Ltd, which can be exploited by attackers to...

Weak Password Vulnerability in Resource Access Control System (WebVPN) of Beijing Netrexport Technology Co.

Resource Access Control System WebVPN is a tool that provides users with easy client-free access to resources. Ltd. Resource Access Control System WebVPN suffers from a weak password vulnerability, which can be exploited by an attacker to log in to the VPN frontend in bulk to obtain sensitive...

Leadsec ACM-Management Platform of Beijing Netnifty Information Technology Co.

Based on the information security field, Netnifty Nebula's business covers network boundary security protection, application and data security protection, network-wide security risk management, professional security solutions and professional security services. Beijing Netnifty Nebula Information...

Binary Vulnerability in KingView

KingView is an industrial automation configuration software produced by Beijing Asian Control Technology Development Co. A binary vulnerability exists in KingView, which can be exploited by attackers to cause the program to crash...

CVE-2020-24930

Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five fingers CMS backend in.php file has arbitrary file deletion vulnerability. Attackers can use vulnerabilities to delete arbitrary files...

CVE-2020-24930

Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five fingers CMS backend in.php file has arbitrary file deletion vulnerability. Attackers can use vulnerabilities to delete arbitrary files...