File Upload Vulnerability in Fusion Command and Dispatch System of Fujian Clarisonic Communication Co.

Founded in 2001, Fujian Qualicom Communication Co., Ltd. is a solution provider and operation service provider focusing on professional communication. A file upload vulnerability exists in the Converged Command and Dispatch System of Fujian Qualicom Communication Co. An attacker can exploit the...

The vulnerability of the NFC component in Android operating systems allows attackers to enhance their privileges.

The vulnerability of the NFC component in Android operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

SQL Injection Vulnerability in Flood Warning Broadcasting System of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. is a national high-tech enterprise, a leading enterprise of Fujian Province Science and Technology Innovation Small Giant, an Internet of Things IoT platform enterprise, an IoT technology expert, and an IoT communication equipment and solution...

SQL Injection Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. is a national high-tech enterprise, a leading enterprise of Fujian Province Science and Technology Innovation Small Giant, an Internet of Things IoT platform enterprise, an IoT technology expert, and an IoT communication equipment and solution...

Closing the technical gap with resiliency pen testing

Organizations across all industries are watching and weighing the real impact and cost of security breaches as they look to budget security spending for 2021. While remote operations are becoming the norm, threat actors have no intention of slowing down their efforts. Instead, they are taking ful...

Weak password vulnerability in AC management platform of Guangzhou AnNet Communication Technology Co.

hereinafter referred to as AnNet focuses on the research and development, production, sales and service of network communication equipment based on IP technology, providing users with network security, routers, switches, firewalls, wireless AP coverage and other network products and business...

Chengdu Flying Fish Star Technology Co., Ltd Flying Fish Star Home Intelligent Routing has a Logic Flaw Vulnerability

Chengdu Flying Fish Star Technology Co., Ltd. specializes in serving enterprise, commercial and home users, providing intelligent and easy-to-use network communication management equipment and value-added services with innovative technology. The company's existing IoT IoT Cloud, Smart Power Box,...

Command Execution Vulnerability in Tenda Enterprise AP Management Routers (CNVD-2021-30044)

hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. A command execution vulnerability exists in TENTE...

谷歌 Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. An out-of-bounds read vulnerability exists in IPC in versions prior to Google Chrome 89.0.4389.114. An attacker can exploit this vulnerability to obtain sensitive information...

Ovarro Tbox Information Disclosure Vulnerability

Ovarro Tbox is an application platform from Ovarro Germany. It offers new automation possibilities, simplifies system engineering and enables key industries worldwide to remotely control and monitor their applications. A security vulnerability exists in the Ovarro Tbox product, which can be...

Command Execution Vulnerability in Tenda Enterprise AP Management Routers

hereinafter referred to as "Tengda" was founded in 1999, is a professional supplier of network communication equipment and solutions, but also the research and development, production, supply, sales and service in one of the high-tech enterprises. A command execution vulnerability exists in TENTE...

The vulnerability of the WebRTC data transfer standard in Google Chrome allows attackers to access confidential data.

The vulnerability of the WebRTC data transfer standard in Google Chrome relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

The vulnerability affects the implementation of the COOKIE-ECHO extension for WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android. This vulnerability allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the COOKIE-ECHO extension implementation in WebRTC browsers such as Google Chrome, Mozilla Firefox, Firefox ESR, and Firefox for Android is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure or...

Huawei Data Communication: Denial of Service Vulnerability in Some Products (huawei-sa-20210210-02-dos)

There is a denial of service vulnerability in some huawei products. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Exploit for Insertion of Sensitive Information into Log File in Canonical Subiquity

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. N...

Securing our approach to domain fronting within Azure

Every single day our teams analyze the trillions of signals we see to understand attack vectors, and then take those learnings and apply them to our products and solutions. Having that understanding of the threat landscape is key to ensuring our customers are kept safe every day. However, being a...

SQL Injection Vulnerability in LAC WEB Control Center of Shanghai Huanchuang Communication Technology Co.

GBCOM is a high-tech company focusing on technical research, product development and sales in the field of wireless broadband communication with WiFi technology as its core. A SQL injection vulnerability exists in the LAC WEB Control Center of Shanghai Huanchuang Communication Technology Co., Ltd...

CVE-2021-27438

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

CVE-2021-27440

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...

Hardcoded credentials

The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 all firmware versions prior to 02A04.1...