[Security Nation] Jill Fraser and Deborah Blyth on Securing Colorado

!\Security Nation\ Jill Fraser and Deborah Blyth on Securing Coloradohttps://blog.rapid7.com/content/images/2021/09/securitynationlogo--1-.jpg In this episode of Security Nation, we chat with Deborah Blyth, CISO of the State of Colorado, and Jill Fraser, CISO for Jefferson County, Colorado. They...

A command execution vulnerability exists in the Reporter system of Fujian Strait Information Technology Co.

Ltd. is a state-controlled high-tech enterprise engaged in technical research, product sales, information security services and other businesses in the field of network security technology. Ltd. Reporter system there is a command execution vulnerability, attackers can use the vulnerability to...

Weak Password Vulnerability in Black Shield Network Security Audit System

Fujian Strait Information Technology Co., Ltd. is a state-controlled high-tech enterprises, specializing in network security technology field of technical research, product sales, information security services and other businesses. A weak password vulnerability exists in the Black Shield Network...

Unauthorized Access Vulnerability in Ovia's Instructional Video Application Cloud Platform

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. Guangzhou Aoweiya Electronic Technology Co., Ltd. campus video application cloud platform has unauthorized access vulnerability, attackers can use the...

SQL Injection Vulnerability in the Website Building System of Jereh Information Business Limited

Jereh Information Business Limited is a company that has completed thousands of corporate websites, e-commerce websites, event websites, as well as a variety of function-specific programs and apps for thousands of companies and organizations. A SQL injection vulnerability exists in the website...

File Upload Vulnerability in Kaytone Applet

Guangzhou KaiSoft Information Technology Co., Ltd. is a collection of enterprise management software development, sales, service, IT operation and maintenance services, online rental services in one of the IT solutions provider. A file upload vulnerability exists in the KaySoft applet, which can ...

SQL Injection Vulnerability in Qilai OA Cl***.aspx File

Xi'an Huatian Synergy Information Technology Co., Ltd. is a company whose business scope includes: sales of computer software and hardware, computer network engineering, design of security monitoring engineering, etc.. A SQL injection vulnerability exists in the Qilai OA Cl.aspx file, which can b...

Unauthorized Access Vulnerability in Business Toll Comprehensive Management Platform of Shanghai Huini Information Technology Co.

Shanghai Huini Information Technology Co., Ltd. is a company mainly engaged in water business charging software. An unauthorized access vulnerability exists in Shanghai Huini Information Technology Co., Ltd.'s business charging integrated management platform, which can be exploited by attackers t...

Information Leakage Vulnerability in Zhongqing Education Cloud Platform

Beijing Zhongqing Nabo Information Technology Co., Ltd, or Zhongqing Nabo for short, is a core enterprise of Zhongqing Group with a history of 20 years, focusing on the in-depth application field of education informatization. Our products are mainly educational software, and our core product is...

Unauthorized Access Vulnerability in Sichuan E-Rite Technology Co.

Ltd. was registered in Sichuan Province on 2010-06-04, belongs to the software and information technology services industry, the main industry for the software and information technology services industry and so on. Sichuan E-Rite Technology Co., Ltd. building system there is an unauthorized acce...

Shanghai Top Thinking Information Technology Co., Ltd ThinkPHP suffers from a deserialization vulnerability (CNVD-2021-49592)

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP has a deserialization vulnerability that can be exploited by attackers to gain server control privileges...

SQL Injection Vulnerability in Employment Service Backend Management System of Chongqing Softfox Information Technology Co. Ltd (CNVD-2021-49529)

Chongqing Softfox Information Technology Co., Ltd. has long been focusing on the Internet + intelligent employment service platform and solutions. SQL injection vulnerability exists in the background management system of employment service of Chongqing Softfox Information Technology Co., Ltd, whi...

SQL Injection Vulnerability in Employment Service Backend Management System of Chongqing Softfox Information Technology Co.

Chongqing Softfox Information Technology Co., Ltd. has long been focusing on the Internet + intelligent employment service platform and solutions. SQL injection vulnerability exists in the background management system of employment service of Chongqing Softfox Information Technology Co., Ltd, whi...

Weak password vulnerability of EasyGBS of Anhui Xufan Information Technology Co.

EasyGBS is a national standard video cloud platform developed by Anhui Xufan Information Technology Co. Anhui Xufan Information Technology Co., Ltd EasyGBS has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Ruiyou Tianyi - Application Virtualization System

Xi'an Ruiyou Information Technology Information Co., Ltd Ruiyou is a professional virtualization and cloud computing solution provider. A weak password vulnerability exists in Ruiyou Skywing-Application Virtualization System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Lepus Database Enterprise Monitoring System of Nuremberg Information Technology (Shanghai) Co.

Lepus is open source , efficient enterprise-class production database monitoring system . A SQL injection vulnerability exists in the Lepus database enterprise monitoring system of NuRen Information Technology Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive database...

How Cyber Safe is Your Drinking Water Supply?

Amid multiple recent reports of hackers breaking into and tampering with drinking water treatment systems comes a new industry survey with some sobering findings: A majority of the 52,000 separate drinking water systems in the United States still havent inventoried some or any of their informatio...

Unauthorized Access Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

Unauthorized Access Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform (CNVD-2021-47700)

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

Unauthorized Access Vulnerability in HP LaserJet MFP M227sdn

Hewlett-Packard HP is one of the information technology IT companies, founded in 1939 1. Headquartered in Palo Alto, California, USA. Hewlett-Packard has three business groups: Information Products Group, Printing and Imaging Systems Group and Enterprise Computer Professional Services Group. An...