Weak Password Vulnerability in Network Video Server of Shenzhen Longchamp Xintron Technology Co.

Shenzhen Longchamp Xintron Technology Co., Ltd. is a leading intelligent service robot solution provider in China. Ltd. Network Video Server has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Online Fingerprint Time and Attendance System of Beijing Zhongcheng Technology Development Co.

Ltd. is a company in the field of time safety management, venture capital, green agriculture, mining extraction and OEM production. An unauthorized access vulnerability exists in the online fingerprint time and attendance system of Beijing Zhongguancun Technology Development Co. Ltd, which can be...

Autodesk Design Review Buffer Overflow Vulnerability (CNVD-2021-53947)

Autodesk Design Review ADR is a suite of AutoCAD drafting software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer error vulnerability that could be...

SQL Injection Vulnerability in Hanvon Face Recognition Attendance Management System of Hanvon Technology Co.

Ltd. is committed to the research and application of intelligent interaction technology in multiple fields. A SQL injection vulnerability exists in the HANWANG Face Recognition Attendance Management System of HANWANG Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in RICOH MP C6004ex at Ricoh (China) Investment Co.

The MP C6004ex is a color digital laminator. An unauthorized access vulnerability exists in the MP C6004ex of Ricoh China Investment Limited, which can be exploited by attackers to obtain sensitive information...

File upload vulnerability in HongCMS (CNVD-2021-46896)

HongCMS is a lightweight website system. A file upload vulnerability exists in HongCMS, which can be exploited by attackers to gain control of the server...

IBM DB2 Backlink Vulnerability

IBM DB2 is a relational database management system from the American company IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM DB2 for Linux, UNIX, and Windows including DB2 Connect Server has a backlink vulnerability that can be exploit...

AKCMS suffers from SQL injection vulnerability (CNVD-2021-46804)

AKCMS is a lightweight content management system based on PHP and MySQL. AKCMS suffers from an SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

CVE-2021-23995

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

Atlassian Bugs Could Have Led to 1-Click Takeover

Atlassian, a platform used by 180,000 customers to engineer software and manage projects, could have been hijacked with a single click due to security flaws, researchers have disclosed. On Thursday, Check Point Research CPR published a report PDF outlining how an attacker could have exploited the...

Cisco Firepower Threat Defense Software Web Services Interface Multiple Vulnerabilities (cisco-sa-asaftd-xss-multiple-FCB3vPZe)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by multiple vulnerabilities. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...

Unauthorized Access Vulnerability in CLX-9301 at Samsung (China) Investment Co.

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An unauthorized access vulnerability...

Unauthorized Access Vulnerability in C480W at Samsung (China) Investment Co.

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An unauthorized access vulnerability...

Unauthorized Access Vulnerability in M2085FW at Samsung (China) Investment Co.

Samsung China Investment Co., Ltd. is the headquarters of Samsung Group in China. By the end of 2008, 20 out of more than 30 companies under Samsung have invested in China, including Samsung Electronics, Samsung SDI, Samsung SDS and Samsung Electro-Mechanics. An unauthorized access vulnerability...

Plugin archive directory traversal in Helm

The Helm core maintainers have identified an information disclosure vulnerability in Helm 3.0.0-3.2.3. Impact A traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author to inject a relative path into a plugin archive, and...

SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day Attacks

A critical vulnerability in SonicWall VPN appliances that was believed to have been patched last year has been now found to be "botched," with the company leaving a memory leak flaw unaddressed, until now, that could permit a remote attacker to gain access to sensitive information. The shortcomin...

Unauthorized Access Vulnerability in SWW-3100BG of Samsung (China) Investment Co.

SWW-3100BG is a router from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung China Investment Co. SWW-3100BG, which can be exploited by attackers to obtain sensitive information...

CVE-2021-0533

creationtimestamp| type| source ---|---|--- 2021-06-22 02:48:29+00:00| exploited| Telegram/oUtqgOwJm3PWppe6M28qQQEAlZ2nJ-elPtm3CWDUSwcoNWQ...

Unauthorized Access Vulnerability in MX-2314N at Sharp Trading (China) Co.

The MX-2314N is a printer from Sharp Trading China Co. An unauthorized access vulnerability exists in the Sharp Trading China Ltd MX-2314N, which can be exploited by attackers to obtain sensitive information...

CVE-2021-32305

creationtimestamp| type| source ---|---|--- 2021-06-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50042 2021-09-02 09:56:23+00:00| seen| MISP/2e8cebbe-4ab2-4eb0-bd6e-e8193972cf4e 2021-09-21 04:42:27+00:00| seen| https://t.me/pwnwikizhchannel/691 2023-04-27 09:58:59+00:00|...