PT-2021-11522

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An improper authorization issue exists, allowing unauthorized users to access the Billing page without the necessary privileges. Recommendations: For version 2019.2.0.6, update to a...

PT-2021-11519

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access Work In Progress WIP details about jobs they should not have access to. Recommendations: For version...

PT-2021-11524

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows unauthorized users to access job details they should not have access to, specifically through the Audit Trail Feature...

PT-2021-11523

Name of the Vulnerable Software and Affected Versions: Star Practice Management Web version 2019.2.0.6 Description: An issue exists where improper authorization allows an unauthorized user to modify user privileges within the application. This can lead to the unauthorized user granting themselves...

CVE-2020-28401: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about jobs he should not have access to...

CVE-2020-28404: Undefined Security Weakness

An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page without the appropriate privileges...

Star Computer Star Practice Management Web 访问控制错误漏洞

Star Computer Star Practice Management Web is a web service used for time-based billing by Star Computer, a UK-based company. The vulnerability can be exploited to access the WIP details of unauthorized jobs...

Denial of Service Vulnerability in YR1800XG of Shenzhen Meike Star Communication Technology Co.

YR1800XG is a router from Shenzhen Meike Star Communication Technology Co. Shenzhen Meikexing Communication Technology Co., Ltd YR1800XG suffers from a denial-of-service vulnerability that can be exploited by attackers to cause denial-of-service attacks...

Denial of Service Vulnerability in MERCURY MR108GP-AC V2.0

MR108GP-AC is an enterprise router from Shenzhen Meike Star Communication Technology Co. A denial of service vulnerability exists in the MERCURY MR108GP-AC V2.0, which can be exploited by attackers to cause a denial of service attack...

Denial of Service Vulnerability in X188G of Shenzhen Meike Star Communication Technology Co.

The X188G is a router. The X188G has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in M18G of Shenzhen Meike Star Communication Technology Co.

The M18G is a wireless router. A denial-of-service vulnerability exists in the M18G of Shenzhen Meike Star Communication Technology Co. An attacker can exploit the vulnerability to cause a denial of service to the target router and its upper tier operator's router by sending a carefully construct...

Denial of Service Vulnerability in Mercuery X18G Routers

The business scope of Shenzhen Meike Star Communication Technology Co., Ltd. includes the technical development of computer wireless LAN products, computer hardware and software, communication equipment, electronic products and network security equipment. A denial of service vulnerability exists ...

Mercury X18G Router Denial of Service Vulnerability

The business scope of Shenzhen Meike Star Communication Technology Co., Ltd. includes: computer wireless LAN products, computer hardware and software, communication equipment, electronic products and so on. Mercury X18G Router denial of service vulnerability can be exploited by attackers to cause...

Directory Traversal Vulnerability in Phantom Route X18G Upnp Server

Phantom Router X18G is a router from Shenzhen Meike Star Communication Technology Co. A directory traversal vulnerability exists in the Mirage Router X18G Upnp Server, which can be exploited by an attacker to obtain sensitive information...

Directory Traversal Vulnerability in Psychological Work Platform of Shanghai North Star Software Co.

Ltd. is a manufacturer and supplier of psychometric software. A directory traversal vulnerability exists in the Psychological Work Platform of Shanghai Northstar Software Co. An attacker can exploit the vulnerability to obtain sensitive information...

The strangest cybersecurity events of 2020: a look back

This year is finally coming to an end, and it only took us about eight consecutive months of March to get here. There is a ton to talk about, and that’s without even discussing the literal global pandemic. You see, 2020s news stories were the pressure-cooker product of mania, chaos, and the...

Century Star Network Information Service Co., Ltd. website building system has SQL injection vulnerability

Century Star Network was founded in October 2004, mainly engaged in brand website construction, promotion service providers, for growing enterprises to provide one-stop information network marketing solutions. There is a SQL injection vulnerability in the website building system of Century Star...

Directory Traversal Vulnerability in Flying Fish Star Enterprise Intelligent Internet Behavior Management System

The business scope of Chengdu Flying Fish Star Technology Co., Ltd. includes: research, development, production and sales of computer software, hardware and network products. A directory traversal vulnerability exists in the Flying Fish Star Enterprise Intelligent Internet Behavior Management...

Denial of Service Vulnerability in CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

License Star Free Edition has a dll hijacking vulnerability

Certificate Star is a professional full-featured ID photo production and editing software, the realization of the intelligent removal of skin oil light, the certificate clothing replacement technology at the same time to support online shooting: support for webcams and cameras that can be online...