Unauthorized Access Vulnerability in the Flash Flood Monitoring and Early Warning Distribution System of Fujian SiChuang Software Co. Ltd (CNVD-2021-50615)

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Fujian Sichuang Software Co. Ltd, which can...

CVE-2021-32718

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper tag sanitization, potentially allowing for JavaScript code execution in the...

Code injection

RabbitMQ is a multi-protocol messaging broker. In rabbitmq-server prior to version 3.8.17, a new user being added via management UI could lead to the user's bane being rendered in a confirmation message without proper tag sanitization, potentially allowing for JavaScript code execution in the...

Pandora FMS Cross-Site Scripting Vulnerability

"Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization.A stored cross-site scripting vulnerability exists in Pandora FMS 7.54 and earlier versions. An attacker could exploit this...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Information Management System of Sichuang Technology Co. Ltd (CNVD-2021-48908)

Siltronic is a company dedicated to the cause of disaster prevention and mitigation in China, providing the government with comprehensive solutions for disaster prevention and mitigation informatization. A SQL injection vulnerability exists in the Flash Flood Monitoring and Early Warning...

Weak password vulnerability in ECMS

Changzhou Ruixin Technology is a manufacturer specializing in remote meter reading, energy consumption monitoring and energy control system construction. There is a weak password vulnerability in ECMS, which can be exploited by attackers to obtain sensitive information...

Pandora FMS Arbitrary File Upload Vulnerability

Pandora FMS is a monitoring system from Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An arbitrary file upload vulnerability exists in Pandora FMS 754 and earlier versions. The vulnerability can be exploited for remote...

executeTrade can be frontrun

Handle gpersoon Vulnerability details Impact An attacker could monitor the mempool and see an executeTrade transaction. He then could checkout the parameters and see if a better trade is possible for himself. He might even create and sign a new trade and then submit the new trade via an...

Logic Flaw Vulnerability in Dahua Integrated Management Platform DSS

Dahua Comprehensive Management Platform DSS is a management platform for managing security protection monitoring equipment, realizing real-time monitoring and video playback of multiple devices and channels. Dahua Integrated Management Platform DSS suffers from a logic flaw vulnerability that can...

PandoraFMS 代码问题漏洞

Pandora FMS is a monitoring system from Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An arbitrary file upload vulnerability exists in Pandora FMS 754 and earlier versions. The vulnerability can be exploited for remote...

Tulsa’s Police-Citation Data Leaked by Conti Gang

The city of Tulsa, OK is asking some of its residents to keep a close eye on their personal and financial accounts after the Conti ransomware group leaked some 18,000 city files, mostly police citations, on the dark web. The leak stemmed from a May 6 ransomware attack that caused the city to shut...

Atlassian Bugs Could Have Led to 1-Click Takeover

Atlassian, a platform used by 180,000 customers to engineer software and manage projects, could have been hijacked with a single click due to security flaws, researchers have disclosed. On Thursday, Check Point Research CPR published a report PDF outlining how an attacker could have exploited the...

SQL Injection Vulnerability in Lepus Database Enterprise Monitoring System of Nuremberg Information Technology (Shanghai) Co.

Lepus is open source , efficient enterprise-class production database monitoring system . A SQL injection vulnerability exists in the Lepus database enterprise monitoring system of NuRen Information Technology Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive database...

File Upload Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Siltronic Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability. An arbitrary file upload vulnerability exists in the Flash Flood Detection and Early Warning Platform of Sicron Technology Limited, which allows an attacker to upload an aspx file to gain access to the...

5 Critical Steps to Recover From a Ransomware Attack

Hackers are increasingly using ransomware as an effective tool to disrupt businesses and fund malicious activities. A recent analysis by cybersecurity company Group-IB revealed ransomware attacks doubled in 2020, while Cybersecurity Ventures predicts that a ransomware attack will occur every 11...

Unauthorized Access Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform (CNVD-2021-47700)

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

Logic Flaw Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

Better Real User Monitoring with BoomerangJS and Akamai mPulse

In this blog, we'll walk through a few different snippet insertion methods and available optimizations...

Russia bans VyprVPN, Opera VPN services for not complying with blacklist request

Russia's telecommunications and media regulator Roskomnadzor RKN on Thursday introduced restrictions on the operation of VyprVPN and Opera VPN services in the country. "In accordance with the regulation on responding to threats to circumvent restrictions on access to child pornography, suicidal,...

D-Link DIR-2640-US Incorrect Access Control Vulnerability

The D-Link DIR-2640-US is a network router device. A security vulnerability exists in the D-Link DIR-2640-US, which can be exploited by an attacker to use telnet login, modify routing information, monitor the traffic of all devices under the router, hijack DNS, and phishing attacks...