Universal Password Login Vulnerability in All-Media Content Management and Business Support Platform of Beijing Jingwei Zhongtian Information Technology Co.

Beijing Jingwei Zhongtian Information Technology Co., Ltd. is a high-tech enterprise specializing in software development and services related to network audio-visual content management and applications. A universal password login vulnerability exists in the all-media content management and...

igt.gov.au Improper Access Control vulnerability

Open Bug Bounty ID: OBB-675997 Description| Value ---|--- Affected Website:| igt.gov.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

CISSP Certification Course — Become An IT Security Professional

If you dream of making it big in the IT security community, the CISSP certification is a necessary milestone. Certified Information Systems Security Professional CISSP is a globally recognised certification in the field of information security, which has become a gold standard of achievement that...

Vulnerabilities in the Website Building System of Shanghai JUE Solutions Information Technology Co.

Ltd. provides Shanghai professional website construction, WAP website construction, mobile APP development, website revision, web design, website promotion, integrated marketing. There is a vulnerability in the website builder system that can be exploited by an attacker to log in to the backend...

SQL Injection Vulnerability in Beijing Yizaitong Information Technology Co.

Beijing Yizaitong Information Technology Co., Ltd. has been committed to enterprise procurement information technology, procurement consulting field, oriented to procurement management, group intensive procurement management, lean supply chain, strategic procurement, project supply chain,...

Denial of Service Vulnerability in NSecKrnl32 Driver of Wei-Eye Computerized Supervisory System of Shandong Anzai Information Technology Co.

PowerEye Computer Supervision System is a professional company computer monitoring and LAN monitoring software. It monitors computer screens and also manages users' online behavior. The NSecKrnl32 driver of Shandong Anzai Information Technology Co., Ltd. has a denial of service vulnerability that...

Further Down the Trello Rabbit Hole

Last month's story about organizations exposing passwords and other sensitive data via collaborative online spaces at Trello.com only scratched the surface of the problem. A deeper dive suggests a large number of government agencies, marketing firms, healthcare organizations and IT support...

SQL Injection Vulnerability in Jiangyin Shun Enterprise Information Technology Co.

Jiangyin Shun Enterprise Information Technology Co., Ltd. is a professional enterprise dedicated to providing Internet application services and independent software development for enterprise informatization. There is a SQL injection vulnerability in the enterprise website building system of...

webworksmd.com XSS vulnerability

Open Bug Bounty ID: OBB-592296 Description| Value ---|--- Affected Website:| webworksmd.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SQL Injection Vulnerability in the Health Management System of Hangzhou Xiho Information Technology Co.

HeeHealth Management System is a set of service platform dedicated to health management developed by Hangzhou HeeHealth Information Technology Co. A SQL injection vulnerability exists in the HeeHealth Management System, which can be exploited by attackers to obtain sensitive information from the...

SQL Injection Vulnerability in Website Building System of Zhongshan NetLink Information Technology Co.

NetLink provides a series of Internet solutions for customers: including website construction, brand image design, Internet software development and application solutions, network promotion and other services. Zhongshan NetLink Information Technology Co., Ltd. website building system has SQL...

Veterans Are a Valuable Cybersecurity Workforce

Editor's Note: This article originally appeared on ITSPmagazine. As a former United States Marine I believe veterans can be instrumental in helping to close the growing cybersecurity skills and people gap. My own story reveals how a military background can provide the perfect foundation for a...

InfoSec Pros Must Fasten Their Seatbelts for Digital Transformation Ride

The IT industry has gone through multiple revolutions – client-server computing, the Internet’s rise, virtualization, mobility – but none rivals the unprecedented impact of today’s digital transformation. The implications for InfoSec professionals are broad, requiring that they adapt quickly to t...

The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management allows attackers to bypass authentication procedures and arbitrarily delete or upload files.

The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass...

FiberHome ADSL AN1020-25 - Improper Access Restrictions

Title: ==== FiberHome Unauthenticated ADSL Router Factory Reset. Credit: ====== Name: Ibad Shah Twitter: @BeeFaauBee09 Website: beefaaubee09.github.io CVE: ===== CVE-2017-14147 Date: ==== 05-09-2017 dd/mm/yyyy About FiberHome: ====== FiberHome Technologies is a leading equipment vendor and global...

Beauty Camera App Has Design Logic Flaws

Beauty Camera is a beauty camera with special effects filters under Guangzhou Beauty Information Technology Co. There is a design logic vulnerability in Beauty Camera APP, which can be exploited by attackers to arbitrarily register users and reset passwords...

Why So Many Top Hackers Hail from Russia

Conventional wisdom says one reason so many hackers seem to hail from Russia and parts of the former Soviet Union is that these countries have traditionally placed a much greater emphasis than educational institutions in the West on teaching information technology in middle and high schools, and...

JVN#25078144: Source code security studying tool iCodeChecker vulnerable to cross-site scripting

Source code security studying tool iCodeChecker provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Source code security studying tool...

JVN#20870477: Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution

AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a remote code execution vulnerability. Impact When accessing a specially crafted URL, arbitrary code may be...

Phoenix Broadband Technologies LLC PowerAgent SC3 Site Controller

CVSS v3 5.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Phoenix Broadband Technologies LLC Equipment: PowerAgent SC3 Site Controller Vulnerability: Use of Hard-Coded Password AFFECTED PRODUCTS Phoenix Broadband Technologies LLC reports that the following versions of...