shanghaistreet.com.au Cross Site Scripting vulnerability OBB-2712714

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Shanghai’s Censors Can’t Hide Stories of the Dead

Many people reportedly died after struggling to access medical care during a brutal lockdown. The families want to make sure these deaths are counted...

Arbitrary File Read Vulnerability in e-office of Shanghai Panavision Network Technology Co. Ltd (CNVD-2022-43244)

e-office is a standard collaborative mobile office platform. Ltd. e-office has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in e-office of Shanghai Panavision Network Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

File Containment Vulnerability in e-office of Shanghai Panavision Networks Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office suffers from a file inclusion vulnerability that can be exploited by an attacker to include files and cause code execution...

SQL Injection Vulnerability in e-office of Shanghai Panmicro Network Technology Co. Ltd (CNVD-2022-43246)

e-office is a standard collaborative mobile office platform. Ltd. e-office suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in e-office of Shanghai Panmicro Network Technology Co.

e-office is a standard collaborative mobile office platform. Ltd. e-office suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Supplier Query System of Shanghai Haidian Software Corporation (CNVD-2022-21719)

Vendor inquiry system is based on VMI management ideas, sharing the enterprise's operational business data with suppliers, instantly controlling the sales information and inventory levels as a solution for market demand forecasting and inventory replenishment. A SQL injection vulnerability exists...

Command Execution Vulnerability in Sunflower Personal Edition for Windows at Shanghai Berry Information Technology Co.

Sunflower is a free, all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. Ltd. Sunflower Personal Edition for Windows has a command execution...

Unauthorized Access Vulnerability in Server Management System of Shanghai Sailian Information Technology Co.

Shanghai Sailian Information Technology Co. was founded on December 19, 2016 . The company's business scope includes: licensed items: type II value-added telecommunication business, etc. An unauthorized access vulnerability exists in the server management system of Shanghai Sailian Information...

ZStack Remote Code Execution Vulnerability

ZStack is a product of Shanghai Cloud Axis Information Technology Co. The ZStack remote code execution vulnerability can be exploited by attackers to execute arbitrary code to gain control of the server...

Unauthorized Access Vulnerability in ioLogik E1242 Series of Mosaic Technology (Shanghai) Co.

The ioLogik E1242 series are daisy-chained Ethernet switches that support the most commonly used I/O data acquisition protocols to match a wide range of applications. Mosa Technologies Shanghai Co., Ltd. ioLogik E1242 series suffers from an unauthorized access vulnerability, which can be exploite...

Shanghai Anywhere Technology Co., Ltd Soul APP has a logic flaw vulnerability

Soul App is a social platform for Generation Z based on interest mapping to build relationships and gamified gameplay for product design. Ltd. Soul APP has a logic flaw vulnerability, which can be exploited by attackers to hijack the attack...

Shanghai Anywhere Technology Co., Ltd Soul APP has information leakage vulnerability

Soul APP is a social platform for Generation Z based on interest mapping to build relationships and gamified gameplay for product design. Ltd. Soul APP has an information leakage vulnerability, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in DIR-846 at AUO Electronic Devices (Shanghai) Co.

The DIR-846 router is a wireless router product for users with gaming and video entertainment needs. A command execution vulnerability exists in the AUO Electronic Devices Shanghai Co. DIR-846, which can be exploited by an attacker to execute arbitrary code...

Weak Password Vulnerability in Reporter System of Shanghai Newton Technology Co.

Ltd. is a professional security company with "network security" as its main axis and "making the network safer" as its mission to provide customers with total network security solutions. Ltd. Reporter system has a weak password vulnerability, which can be used by attackers to log into the system...

Command Execution Vulnerability in Reporter System of Shanghai Newshield Technology Co.

Ltd. is a professional security company with "network security" as the main axis and "make the network more secure" as the mission to provide customers with network security solutions. Ltd. Reporter system there is a command execution vulnerability, attackers can use the vulnerability to execute...

Command Execution Vulnerability in E-Mobile (CNVD-2021-67574)

E-Mobile is a mobile office product developed by Shanghai Pantech Network Technology Co., Ltd. and is designed for cell phone, tablet and other mobile end users...

Arbitrary File Read Vulnerability in ECShop of Shanghai Shangpai Network Technology Co.

ECShop is a B2C independent online store system developed based on PHP language and MYSQL database framework, suitable for enterprises and individuals to quickly build a personalized online store. Ltd. ECShop has an arbitrary file read vulnerability, which can be exploited by attackers to obtain...

XSS Vulnerability in the Transportation Management Cloud Platform of Shanghai BuBuYiBai Technology Co.

Ltd. is a high-tech enterprise providing information system for domestic small and medium-sized logistics. Shanghai BBYB Technology Co., Ltd. has an XSS vulnerability in its transportation management cloud platform, which can be exploited by attackers to obtain sensitive information such as user...