SQL Injection Vulnerability in in***.do Page of Website Building System at Shanghai BeltLeader Information Technology Co.

Ltd. is a new technology company based on independent innovation, to provide enterprises with the most valuable Internet products and services. A SQL injection vulnerability exists in the in.do page of the website building system of Shanghai BeltLeader Information Technology Co. An attacker can...

SQL Injection Vulnerability in Shanghai Qiu Cheng Information Technology Co.

Shanghai Qiu Cheng Information Technology Co., Ltd. is mainly engaged in the field of computer technology development, technical services, technical consulting, computer graphic design, conference services, corporate image planning, business management consulting in addition to brokerage, market...

Binary Vulnerability in TGA Image Processing by Kinco Designer Configuration Software of Shanghai BBK

Shanghai BUCO Automation Co., Ltd. has been focusing on the research, development, production, sales and related technical services of core components for industrial automation equipment control and industrial IoT/Internet software and hardware, and providing customers with equipment automation...

Binary Vulnerability in Shanghai BUCO KINCO Touch Screen Configuration Editor Software

Shanghai BUCO Automation Co., Ltd. has been focusing on the research, development, production, sales and related technical services of core components for industrial automation equipment control and industrial IoT/Internet software and hardware, and providing customers with equipment automation...

Binary Vulnerability in Shanghai BUCO KINCO Touch Screen Configuration Editor Software (CNVD-2020-69458)

Shanghai BUCO Automation Co., Ltd. has been focusing on the research, development, production, sales and related technical services of core components for industrial automation equipment control and industrial IoT/Internet software and hardware, and providing customers with equipment automation...

SQL Injection Vulnerability in VUMC Cloud of Shanghai VUMC Software Co. Ltd (CNVD-2020-67629)

Ltd. is a foreign trade SaaS service provider, but also a professional foreign trade industry solutions provider. Ltd. SQL injection vulnerability exists in VUMA Cloud. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Unauthorized Access Vulnerability in H5S CONSOLE at ZeroVision Technologies (Shanghai) Co.

ZeroVision Technology Shanghai Co., Ltd. is to serve customers with leading video technology, committed to the Internet of Things video development simplicity, relying on HTML5 WebRTC and other new technologies to achieve the simplicity of the full-platform video playback. Unauthorized access...

Denial of Service Vulnerability in Weekly Shanghai App

Week to Shanghai app is a life service guide platform. A denial of service vulnerability exists in Zhou to Shanghai App, which can be exploited by an attacker to build malformed serialized Intent data to launch the app and cause the app to crash, posing information leakage and operational securit...

Heap Overrun Read Vulnerability in ABC Lookup of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-64625)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. ABC Viewer has a heap out-of-bounds read vulnerability, which can be exploited to cause the software to crash...

Shanghai Yongxi Information Technology Co., Ltd. website building system has SQL injection vulnerability

Shanghai Yongxi Information Technology Co., Ltd. is a creative team dedicated to the fusion of technology and business, providing differentiated services and solutions that benefit our customers. Shanghai Yongxi Information Technology Co., Ltd. website builder system has a SQL injection...

SQL Injection Vulnerability in the Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niomai Network Technology Co., Ltd. station building system there is a SQL injection vulnerability attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Website Building System of Shanghai Niomai Network Technology Co.

Niu Mai Network Technology is a software company focusing on serving small and medium-sized courier and logistics enterprises. Shanghai Niumai Network Technology Co., Ltd. website building system has a SQL injection vulnerability, through which an attacker can obtain sensitive information from th...

Vulnerability in Ecstore of Shanghai Shangpai Network Technology Co.

Ecstore is based on a new generation of "e-commerce solution-driven engine" ECOS development of enterprise-class open source online store system , the system is based on the PHP language and MYSQL database framework for the development of cross-platform open-source program . Ltd. Ecstore has an...

x86: Race condition in Xen mapping code

ISSUE DESCRIPTION The Xen code handling the updating of the hypervisor's own pagetables tries to use 2MiB and 1GiB superpages as much as possible to maximize TLB efficiency. Some of the operations for checking and coalescing superpages take non-negligible amount of time; to avoid potential lock...

Code Execution Vulnerability in 37GameBox of Shanghai Hardtone Network Technology Co.

37GameBox is a web game box tool under Sanqi Entertainment. Ltd. 37GameBox suffers from a code execution vulnerability that can be exploited by an attacker to execute an executable program containing arbitrary code during the immediate experience after installation...

Code Execution Vulnerability in Shanghai Shield Information Technology Co.

Fast Screen Casting for PC is a cell phone, computer and TV screen casting software developed by Shanghai Shield Information Technology Co. Ltd. Fast Cast Screen has a code execution vulnerability that can be exploited by an attacker to execute an executable program containing arbitrary code duri...

Unauthorized Access Vulnerability in the University Version of the Psychological Assessment System of Shanghai Huicheng Consulting Co.

Psychological Assessment System University Edition is a comprehensive software integrating psychological assessment, crisis warning, psychological profile and other functions, supporting both PC assessment and mobile assessment. An unauthorized access vulnerability exists in the University Editio...

DEBIAN-CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

ALPINE-CVE-2020-25596

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...

Design/Logic Flaw

An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activities to software. One of Xen's sanitization paths injects a GP fault, and incorrectly delivers it twice to the guest...