Information leakage vulnerability in CSC-850 of Beijing Sifang Relay Automation Co., Ltd (CNVD-2020-58374)

The CSC850 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. An information disclosure vulnerability exists in the CSC-850 of Beijing Sifang Relay Automation Company Limited, which can be...

Denial of Service Vulnerability in CSC-830 of Beijing Sifang Relay Automation Co. Ltd (CNVD-2020-59455)

CSC830 PLC is a compact controller for small and medium-sized discrete automation systems and stand-alone automation systems from Beijing Sifang Relay Automation Co. Beijing Sifang Relay Automation Co., Ltd CSC-830 has a denial of service vulnerability, which can be exploited by an attacker to...

Information Leakage Vulnerabilities in the Unified Audio/Video Platform of Beijing Huayu Information Technology Co.

Ltd. is a company that specializes in software and information services. An information leakage vulnerability exists in the unified audio and video platform of Beijing Huayu Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-60136)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

Beijing NPC Kingcang Information Technology Co. KingbaseES V8 R3 suffers from an information leakage vulnerability

KingbaseES abbreviation: Kingbase database or KingbaseES is a general-purpose relational database management system with independent intellectual property rights developed by Beijing NPC Kingbase Information Technology Co. There is an information leakage vulnerability in KingbaseES of Beijing NPC...

CVE-2020-24158

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

CVE-2020-24158

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

Code injection

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

CVE-2020-24158

CVE-2020-24158 affects 360 Speed Browser (version 12.0.1247.0) and is rooted in a DLL hijacking vulnerability. The available documents identify the affected product as a dual-core browser owned by Beijing Qihoo Technology and describe that exploitation enables attackers to execute malicious code....

CVE-2020-24158

360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. It is a dual-core browser owned by Beijing Qihoo Technology...

Command Execution Vulnerability in KPS2204 at Beijing Eastland Technology Co.

The KPS2204 is a programmable protocol converter developed specifically for serial device networking applications. A command execution vulnerability exists in the KPS2204 of Beijing Eastland Technology Co. Ltd. that can be exploited by an attacker to execute arbitrary commands...

Information Disclosure Vulnerability in KPS2204 of Beijing Eastland Technology Co.

The KPS2204 is a programmable protocol converter developed specifically for serial device networking applications. Ltd. KPS2204 suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Binary Vulnerability in Driver Wizard Standard Edition of Beijing Cheetah Mobile Technology Co.

Driver Wizard is a driver management and maintenance tool that integrates driver management and hardware detection. A binary vulnerability exists in the standard version of Driver Wizard by Beijing Cheetah Mobile Technology Company Limited, which can be exploited by attackers to cause a system...

Command Execution Vulnerability in Resource Access Control System (WebVPN) of Beijing Netrexel Technology Co.

Resource Access Control System WebVPN is a tool that provides users with easy client-free access to resources. Ltd. Resource Access Control System WebVPN suffers from a command execution vulnerability that can be exploited by an attacker to gain control of a web server...

Unauthorized Access Vulnerability in JeewxBoot of Beijing National Torch Information Technology Co.

JeewxBoot is a SpringBoot-based open source WeChat housekeeper system , using SpringBoot2.1.3 Mybatis + Velocity framework technology. Beijing State Torch Information Technology Co. JeewxBoot has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive informati...

Unauthorized Access Vulnerability in JeewxBoot of Beijing National Torch Information Technology Co.

JeewxBoot is a SpringBoot-based open source WeChat housekeeper system , using SpringBoot2.1.3 Mybatis + Velocity framework technology. Beijing State Torch Information Technology Co. JeewxBoot has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive informati...

Beijing Kuangshi Technology MEGVII Koala Access Control Error Vulnerability

Beijing Kuangshi Technology MEGVII Koala is a set of intelligent real estate solutions dedicated to commercial real estate scenarios from Beijing Kuangshi Technology, which provides front-end image acquisition units, people access management, video surveillance and other functions. A security...

Command Execution Vulnerability in CyberControl of Beijing Sifang Relay Automation Co.

CyberControl is a flexible and customizable automation software platform that runs on multiple operating systems for applications ranging from monitoring masters in large industrial systems to tablet-based local monitoring systems. A command execution vulnerability exists in CyberControl of Beiji...

SQL Injection Vulnerability in SS***.ashx Page of Integrated Management Platform of Beijing Zhongcheng Kexin Technology Development Co.

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. SQL injection vulnerability exists in the SS.ashx page of the integrated management platform of Beijing Zhongcheng Kexin Science and Technology Development Company Limited, which can be...

XSS Vulnerability in the Website Building System of Beijing ZhuoYan Technology Co.

Beijing Zhuoyan Technology Co., Ltd. is a technical enterprise providing self-service website building system. There is an XSS vulnerability in the website building system of Beijing ZhuoYan Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information such as user...