Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System

Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. A command execution vulnerability exists in the Zhongxin Golden Shield information security management system, which can be exploited by an attacker to...

Weak Password Vulnerability in VD-130Ae Camera at Golden Brick Communication Technology Co.

Brickcom Corporation Brickcom is composed of R&D team with rich experience in surveillance industry, and develops digital surveillance products with advanced technology. Including Mega IP Camera, Wireless IP Camera, Video Server, 3G Video Transmission NVR Embedded Network DVR, CMS Client Platform...

SQL Injection Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. There is a SQL injection vulnerability in the Zhongxin Golden Shield information security management system, which can be exploited by attackers to obta...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield information security management system realizes the collection, monitoring, analysis, early warning and control of all kinds of resource information such as network traffic, IP address, domain name, information content, application and so on in the IDC server room. Weak...

Hackers Targeting professionals With 'more_eggs' Malware via LinkedIn Job Offers

A new spear-phishing campaign is targeting professionals on LinkedIn with weaponized job offers in an attempt to infect targets with a sophisticated backdoor trojan called "moreeggs." To increase the odds of success, the phishing lures take advantage of malicious ZIP archive files that have the...

LinkedIn Spear-Phishing Campaign Targets Job Hunters

A threat group called Golden Chickens is delivering the fileless backdoor moreeggs through a spear-phishing campaign targeting professionals on LinkedIn with fake job offers, according to researchers at eSentire. The phishing emails try to trick a victim into clicking on a malicious .ZIP file by...

SQL Injection Vulnerability in Intelligent Waste Sorting Management System

Tongling Golden Age Technology Limited Liability Company is a combination of the Internet of Things, information technology, waste classification and treatment of enterprises. An SQL injection vulnerability exists in the Intelligent Garbage Classification Management System, which can be exploited...

Web vulnerabilities exploit weekly digest #1. March 8-15th 2021. VMware vCenter and Apache OFBiz RCE.

Welcome to the Wallarm weekly web exploits digest! Since this week, we will publish our weekly digests consists of web exploits with CVSS scores higher than 5. It will be followed by explanations, risks analysis, related stories and news. So, here we go! The most sophisticated and interesting...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield Information Security Management System adopts distributed data collection, intelligent packet reorganization and flow reorganization, adaptive in-depth protocol analysis, real-time network protocol blocking, massive data storage, in-depth data mining and other advanced...

Golden FTP Server 4.70 Buffer Overflow

Golden FTP Server 4.70 - 'PASS' Buffer Overflow 2 Author: 1F98D Original Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on Windows 10 x64 A buffer overflow exists in GoldenFTP during the authentication process. Note that the source ip address of the user performing the...

Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)

Golden FTP Server 4.70 - 'PASS' Buffer Overflow 2 Author: 1F98D Original Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on Windows 10 x64 A buffer overflow exists in GoldenFTP during the authentication process. Note that the source ip address of the user performing the...

SVR Attacks on Microsoft 365

FireEye is reporting the current known tactics that the SVR used to compromise Microsoft 365 cloud data as part of its SolarWinds operation: Mandiant has observed UNC2452 and other threat actors moving laterally to the Microsoft 365 cloud using a combination of four primary techniques: Steal the...

Command Execution Vulnerability in Huaan Securities Qianlong Golden Edition

Qianlong Golden Edition is a market analysis system, including online trading system, new support for the delayed trading of treasury bonds reverse repo. Huaan Securities Qianlong Golden Edition has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL...

SQL Injection Vulnerability in Golden Shop Worry Free Intelligent Shop Management System

Shenzhen to soft information technology limited company is committed to research and development gold store worry-free jewelry snack store management software series, to meet the needs of various types of jewelry retail store management software. Worry-free intelligent store management system SQL...

Changzhou Manhao Information Technology Co., Ltd. website building system has SQL injection vulnerability

Founded in 2007, Manhao is a subsidiary of Golden Globe Group. Over the years, we have been committed to enhancing the brand image of our customers and helping them to expand domestic and international markets, with many years of experience in e-commerce and factory foreign trade operations, and...

Secure Cloning: VMware Advances the State of the Art in Secure VDI Infrastructure

The need for security in the workplace has changed. Remote work is the new normal and the result is drastic changes to an organization’s entire attack surface area. Cybercriminals are taking advantage of this new reality by targeting the very means by which employees connect to corporate resource...

Command Execution Vulnerability in Golden Examiner Exam Software PC Client Software

JinKaodian Exam Software is a simulation exam system launched by JinKaodian that completely restores the real exam site, providing high-quality test questions for vocational exams.The software contains chapter practice questions, past years' questions, simulation papers, prediction papers, and it...

SQL Injection Vulnerability in Jiangyin Golden Pulse Technology Co.

Jiangyin Golden Pulse Technology Co., Ltd. is a network service provider specializing in website construction and website promotion. SQL injection vulnerability exists in the website building system of Jiangyin Golden Pulse Technology Co. Attackers can use the vulnerability to obtain sensitive...

golden-bee.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1155812 Security Researcher kun-fly Helped patch 791 vulnerabilities Received 7 Coordinated Disclosure badges Received 44 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting golden-bee.ru website and i...