File Upload Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-52386)

Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is a file uploa...

SQL Injection Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-52066)

Ltd. is a high-tech enterprise integrating product research and development, application integration and customer service, with the main goal of providing high-quality application software system design, integration and maintenance services for users in the library industry. There is a SQL...

XSS Vulnerability in Meiqiao Online Customer Service System

Chengdu Meichai Network Technology Co., Ltd. provides one-stop customer interaction SaaS services; at present, Meichai has online customer service, call center and customer service robots and other products, which are committed to helping enterprises and customers to improve the efficiency of...

Attackers Breach Microsoft Customer Service Accounts

The same group behind the SolarWinds supply-chain attacks has been targeting Microsoft’s corporate networks to gain access to specific organizations — primarily, U.S.-based IT and government organizations. Microsoft officially announced the attacks after Reuters obtained an email sent to customer...

A Peek Inside the Underground Ransomware Economy

Ransomware is not just a type of malware – it’s also at the center of a sophisticated, flourishing underground economy that has all the conventions of legitimate commerce. It’s a community made up of major malware developers, affiliates and channel partners, and those that provide adjacent...

Pega Infinity patches authentication vulnerability

Security researchers came across a Pega Infinity vulnerability through participation in Apple’s bug bounty program, after focusing on vendors that supplied technology to Apple. By using Burp Suite—an integrated platform for performing security testing of web applications—the security researchers...

File Upload Vulnerability in WoSmith Customer Service System

Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. There is a file upload vulnerability in WoSmith's customer service system, which can be exploited by attackers to gain control of the server...

Don’t post it! Six social media safety sins to say goodbye to

If you or anyone you know is committing the below social media sins, it’s time to change that habit of an online lifetime. Even the most innocuous of things can cause trouble down the line, because everyone’s threat model is different. Unfortunately, people tend to realise what their threat model...

SSRF Vulnerability in Omni-Channel Customer Service System of Foshan Beamy Information Technology Co.

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. Ltd. omni-channel customer service system exists SSRF vulnerability, attackers can use the vulnerability to read arbitrary files...

Information leakage vulnerability in the omni-channel customer service system of Foshan Beame Information Technology Co.

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an information leakage vulnerability in the omni-channel customer service system of Foshan Beamy Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Omni-channel customer service system of Foshan Beame Information Technology Co., Ltd. suffers from arbitrary file reading vulnerability

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an arbitrary file reading vulnerability in the omni-channel customer service system of Foshan Bemis Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

2021 KuppingerCole Leadership Compass names Imperva an overall leader for Database and Big Data Security

It is my pleasure to report that in their 2021 overview of the market for Database and Big Data Security solutions, leading technology analyst KuppingerCole has identified Imperva as an Overall Leader for the first time. Imperva scored five out of five for product security, functionality,...

XSS Vulnerability in 53FastService's Online Customer Service System

Zhejiang Fast Service Group Co., Ltd. was established on August 01, 2006 . Legal representative Lou Weibo, the company's business scope includes: general items: technical services, technology development, technology consulting, technology exchanges, technology transfer, technology promotion and s...

File Upload Vulnerability in WeLive Online Customer Service System of Beijing Wein Software

WeLive customer service system uses WebSocket communication technology, based on PHP development, does not rely on the official server. It supports full-duplex communication between the client browser and the remote host, that is, it allows the server to actively push information to the client,...

WeLive online customer service system suffers from arbitrary file download vulnerability

WeLive Online Customer Service System is an online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability. An attacker can use this vulnerability to download arbitrary files from the server and obtain sensitive information...

File Containment Vulnerability in WeLive Online Customer Service System

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has a file inclusion vulnerability that can be exploited by an attacker to write arbitrary script files and gain system privileges...

WeLive online customer service system suffers from arbitrary file download vulnerability

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has an arbitrary file download vulnerability that can be exploited by an attacker to obtain sensitive information...

Arbitrary file deletion vulnerability in WeLive online customer service system

WeLive online customer service system is a small program, easy to install and use online online customer service system. WeLive Online Customer Service System has an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

Versiant LYNX Customer Service Portal Cross-Site Scripting Vulnerability

Versiant LYNX Customer Service Portal CSP is a customer service portal system from Versiant USA. A cross-site scripting vulnerability exists in Versiant LYNX Customer Service Portal CSP version 3.5.2. The vulnerability stems from a lack of proper validation of client data by the web application. ...

CVE-2020-9055

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...