11811 matches found
Arbitrary file read vulnerability exists in NC Cloud of UFIDA Network Technology Corporation (CNVD-2024-37279)
NC Cloud is a large enterprise digitalization platform. An arbitrary file read vulnerability exists in UFIDA Network Technology Corporation NC Cloud, which can be exploited by attackers to obtain sensitive information...
Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection
Meta, the parent company of Facebook, Instagram, and WhatsApp, agreed to a record $1.4 billion settlement with the U.S. state of Texas over allegations that it illegally collected biometric data of millions of users without their permission, marking one of the largest penalties levied by regulato...
Command Execution Vulnerability in Tianrongxin Internet Behavior Management System of Beijing Tianrongxin Technology Co. Ltd (CNVD-2024-37302)
Beijing Tianrongxin Technology Co., Ltd. is a solution provider of information security products and services in China. Beijing Tianrongxin Technology Co., Ltd Tianrongxin Internet behavior management system has a command execution vulnerability that can be exploited by attackers to gain control ...
Simopro Technology WinMatrix3 SQL Injection Vulnerability (CNVD-2025-20311)
Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a SQL injection vulnerability that stems from a lack of proper validation of user...
New Research: The Proliferation of Cellular in IoT
Researchers explain the trend and argue for deeper understanding Analysis of Cellular Based Internet of Things IoT Technology is a new whitepaper co-authored by Rapid7 principal security researcher Deral Heiland and Thermo Fisher Scientific lead product security researcher Carlota Bindner. In thi...
Information leakage vulnerability in NVR301-08-P8 of Zhejiang Yushu Technology Co.
NVR301-08-P8 is an NVR video recorder device produced by Zhejiang Yusi Technology Co. Ltd. NVR301-08-P8 suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
CVE-2024-7202
The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...
CVE-2024-7201
The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...
CVE-2024-7202 Simopro Technology WinMatrix3 Web package - SQL Injection
The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...
CVE-2024-7202
The CVE-2024-7202 entry concerns Simopro Technology’s WinMatrix3 Web package, where the query functionality lacks input validation, enabling SQL injection by unauthenticated remote attackers. The vulnerability affects the WinMatrix3 Web package and allows attackers to read, modify, and delete dat...
CVE-2024-7202 Simopro Technology WinMatrix3 Web package - SQL Injection
The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...
CVE-2024-7201 Simopro Technology WinMatrix3 Web package - SQL Injection
The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...
CVE-2024-7201 Simopro Technology WinMatrix3 Web package - SQL Injection
The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...
PT-2024-38163 · Simopro Technology · Winmatrix3 Web Package
Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package from Simopro Technology affected versions not specified Description: The issue concerns the login functionality, which lacks proper validation of user input. This allows unauthenticated remote attackers to inject SQL...
PT-2024-38164 · Simopro Technology · Winmatrix3 Web Package
Name of the Vulnerable Software and Affected Versions: WinMatrix3 Web package from Simopro Technology affected versions not specified Description: The query functionality lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and...
Arbitrary File Read Vulnerability in Tianwen Property ERP System of Chengdu Tianwen Interconnection Technology Co. Ltd (CNVD-2024-36506)
Based on software development and technical services, Chengdu Tianwen Interlink Technology Co., Ltd. establishes property ERP application system and provides property management companies with intelligent property management solutions aiming at cost reduction, quality assurance and efficiency...
CVE-2024-26520
An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets...
Offensive AI: The Sine Qua Non of Cybersecurity
"Peace is the virtue of civilization. War is its crime. Yet it is often in the furnace of war that the sharpest tools of peace are forged." - Victor Hugo. In 1971, an unsettling message started appearing on several computers that comprised ARPANET, the precursor to what we now know as the Interne...
Europe Is Pumping Billions Into New Military Tech
The European Commission is allocating €7.3 billion for defense research over the next seven years. From drones and tanks of the future to battleships and space intelligence, here's what it funds...