Foxit PDF Reader Remote Code Execution Vulnerability (CNVD-2021-100585)

A security vulnerability exists in Foxit PDF Reader, a PDF reader from Foxit China, caused by the failure to verify the existence of an object before performing operations on it. An attacker can exploit this vulnerability to execute arbitrary code on an affected Foxit PDF Reader installation...

Easytest Cross-Site Scripting Vulnerability

Easytest is an online learning quiz platform of China's Huaju Digital Technology Co. Easytest suffers from a cross-site scripting vulnerability that could be exploited by remote attackers to inject JavaScript and perform stored XSS attacks...

LaraCms Information Disclosure Vulnerability

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS is vulnerable to an information disclosure vulnerability that stems from the fact that the program transmits information in plaintext, which can be exploited by attackers to cause information disclosure...

LaraCms Cross-Site Scripting Vulnerability (CNVD-2021-83574)

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS contains a cross-site scripting vulnerability that can be exploited by attackers to execute arbitrary web scripts or HTML via specially crafted loads in the content editor...

LaraCms Cross-Site Scripting Vulnerability

LaraCms is a modern content management system in China. version 1.0.1 of LaraCMS contains a cross-site scripting vulnerability, which can be exploited by attackers to execute arbitrary web scripts or HTML via specially crafted loads in the page management module...

ECOA BAS controller path traversal vulnerability

Ecoa Bas controller is a building automation controller from Ecoa Technologies Corp. in China. A path traversal vulnerability exists in Ecoa Bas controller, which can be exploited by attackers to compromise the device directory content by using the GET parameter in the file manager...

ECOA BAS controller access control error vulnerability

Ecoa Bas controller is a building automation controller from Ecoa Technologies Corp in China. Ecoa Bas controller is vulnerable to an access control error, which can be exploited by attackers to compromise administrative account credentials in clear text to cause privilege escalation...

Multiple Huawei products cross the border to write vulnerabilities

Huawei Ngfw Module is a firewall module from Huawei, China.Huawei IPS Module is an Intrusion Prevention System IPS module from Huawei, China.Huawei S5700, Huawei S12700, Huawei S2700 and Huawei The Huawei S5700, Huawei S12700, Huawei S2700 and Huawei S6700 are all enterprise-class switches from...

ZZCMS SQL Injection Vulnerability (CNVD-2021-103656)

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of external input SQL statements in the dlid parameter on the application's /dl/dlprint.php page. An attacker could use...

ZZCMS SQL Injection Vulnerability (CNVD-2021-102063)

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS version 2019 is vulnerable to SQL injection, which stems from the software's lack of effective filtering and escaping of SQL statements. An attacker retrieves sensitive data via the dlid parameter in the cookie on the...

ZZCMS subzs.php component SQL injection vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to SQL injection, which stems from the lack of effective filtering and escaping of SQL statements in the subzs.php component. An attacker could use this vulnerability to execute illegal SQL...

ZZCMS SQL Injection Vulnerability (CNVD-2021-102064)

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the id parameter on the application's /dl/dlprint.php page. An attacker could u...

Staggering growth of cybercrime and how data science helps improve online security

By Waqas If you were to compare the money generated by cybercrime with the GDP of world nations, it would come third behind the economic powerhouses of America and China. This is a post from HackRead.com Read the original post: Staggering growth of cybercrime and how data science helps improve...

SQL injection vulnerability exists in the flash flood monitoring and warning platform of Four Creation Technology Co.

Si Chuang Technology Co., Ltd. is a disaster mitigation and Xingli information service provider in China. There is a SQL injection vulnerability in the flash flood monitoring and early warning platform of Sichong Technology Co., Ltd. which can be exploited by attackers to obtain sensitive...

Foxit PDF Reader Data Forgery Problem Vulnerability

Foxit PDF Reader is China Foxit Foxit company a PDF reader. A data forgery vulnerability exists in the Foxit PDF Reader product that stems from a lack of proper validation of hidden and incremental data in digitally signed PDF files. A remote attacker can exploit this vulnerability to display...

VirusTotal Releases Ransomware Report Based on Analysis of 80 Million Samples

As many as 130 different ransomware families have been found to be active in 2020 and the first half of 2021, with Israel, South Korea, Vietnam, China, Singapore, India, Kazakhstan, Philippines, Iran, and the U.K. emerging as the most affected territories, a comprehensive analysis of 80 million...

Advantech WebAccess SCADA Authorization Issues Vulnerability

Advantech WebAccess SCADA is a set of SCADA software based on browser architecture from Advantech, Taiwan, China. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability...

Unspecified vulnerability exists in IR615 Router (CNVD-2021-82943)

The IR615 Router is a 4G industrial router from Rimu Technologies, China. The IR615 Router has a security vulnerability that could be exploited by an attacker to obtain user credentials to enumerate passwords and emulate other application users and perform actions on their behalf...

IR615 Router has an unspecified vulnerability (CNVD-2021-82942)

The IR615 Router is a 4G industrial router from Rimu Technologies, China. The IR615 Router has a security vulnerability that could be exploited by an attacker by sending a link to the administrator to exploit the header, which constitutes the router's management portal and tricks the administrato...

IR615 Router File Upload Vulnerability

The IR615 Router is a 4G industrial router from Rimu Technologies, China. The IR615 Router is vulnerable to file uploads, which can be exploited by attackers to upload malicious files as an administrator...