Connected Farms Easy Pickings for Global Food Supply-Chain Hack

A group of hackers made an unnerving DEF CON 29 presentation showing how the sprawling growth of digital and automated farming has left the world’s food supply chain vulnerable to cyberattack. A video for DEF CON 29 hacker conference this week put out by the group Sick Codes explained that modern...

The vulnerability of the building management software (management of access control, security systems, video surveillance, and automation) in Andover Continuum arises from the lack of measures to protect input data. This allows intruders to perform cross-site scripting attacks (XSS).

The vulnerability of the building management software management of access control, security systems, video surveillance, and automation in Andover Continuum is related to the lack of measures for cleaning input data. Exploiting this vulnerability could allow a remote attacker to perform cross-si...

Combing through the fuzz: Using fuzzy hashing and deep learning to counter malware detection evasion techniques

Today’s cybersecurity threats continue to find ways to fly and stay under the radar. Cybercriminals use polymorphic malware because a slight change in the binary code or script could allow the said threats to avoid detection by traditional antivirus software. Threat actors customize their wares...

ZOHO ManageEngine AssetExplorer Trust Management Issue Vulnerability

ZOHO ManageEngine AssetExplorer is a suite of asset management software from ZOHO, a US-based company. ZOHO ManageEngine AssetExplorer Agent 1.0.34 is vulnerable to a trust management issue that could be exploited by an attacker to remotely execute code on the agent machine as NT AUTHORITY SYSTEM...

The Everyday IT Tools That Can Offer ‘God Mode’ to Hackers

Attackers are increasingly attuned to the power and potential of remote management software...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software (CNVD-2021-55195)

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...

WMS SQL注入漏洞

WMS is a warehouse management software. A SQL injection vulnerability exists in WMS version 1.0, which can be exploited by remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php"...

Tianjin Shenzhou Haotian Technology Co., Ltd. online self-service accounting system has logic flaws vulnerability

Tianjin Shenzhou Haotian Technology Co., Ltd. is a high-tech enterprise integrating management software design, development, sales and service. Tianjin Shenzhou Haotian Technology Co., Ltd. online self-service reporting system has a logic flaw vulnerability, attackers can use the vulnerability to...

Kaseya VSA 代码注入漏洞

Kaseya VSA is the RMM Remote Monitoring and Management software commonly used by Kaseya's Managed Service Providers MSPs in the United States to manage their customers' networks. Kaseya VSA is vulnerable to a code injection vulnerability, no details of the vulnerability are provided at this time...

The Unfixed Flaw at the Heart of REvil’s Ransomware Spree

Security researchers warned Kaseya about its IT management software in April, but the patches didn't come fast enough to avert last week's disaster...

File Upload Vulnerability in Collaborative Office Platform of Microsoft Technology (Hangzhou) Co.

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. A file upload vulnerability exists in the Collaboration Office platform of Microhome Software Technology Hangzhou Co., Ltd, whi...

MDT AutoSave 操作系统操作系统命令注入漏洞

MDT AutoSave is a software application. It provides an automated change management function. An operating system command injection vulnerability exists in MDT AutoSave, which stems from the application's API not validating data data effectively, allowing an attacker to execute system commands by...

Command execution vulnerability in Zhiyuan OA (CNVD-2021-51370)

Zhiyuan OA is a collaborative management software, a digital collaborative operation platform for medium-sized and large group organizations. A command execution vulnerability exists in Zhiyuan OA, which can be exploited by an attacker to execute arbitrary commands...

Directory Traversal Vulnerability in Yulin Golden Point Cloud Software Technology Co.

Yulin Golden Point Cloud Software Technology Co., Ltd, business scope: artificial intelligence application software development; network and information security software development; software sales; information security equipment sales; network equipment sales; electronic product sales and so on...

Unauthorized Access Vulnerability in Lexmark B2338dw

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in Lexmark B2338dw, which can be exploited by attackers to obtain sensitive informati...

SQL Injection Vulnerability in Guangzhou Tutron interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

Unauthorized Access Vulnerability in Lexmark MB2236adw

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in the Lexmark MB2236adw, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in Lexmark CX517de

Lexmark NYSE: LXK is a U.S.-based company that develops and manufactures laser printers and is a provider of content management software, primarily for business users. An unauthorized access vulnerability exists in the Lexmark CX517de, which can be exploited by attackers to obtain sensitive...

Weak Password Vulnerability in IP Camera of Zhejiang Dahua Technology Co.

IP Camera is a network camera management software. A weak password vulnerability exists in IP Camera of Zhejiang Dahua Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Logic Vulnerabilities in the New Business Warfare Sandbox System of Xindao Technology Co.

New Way Technology Co., Ltd. is an enterprise management software and enterprise Internet service provider. A logic vulnerability exists in the Xindao New Business Warfare Sandbox system of Xindao Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...