11811 matches found
CVE-2024-26520
The CVE-2024-26520 entry concerns Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1. Multiple connected sources confirm a vulnerability where an attacker can bypass authentication and perform arbitrary password resets. This affects the Rest...
IR Trends: Ransomware on the rise, while technology becomes most targeted sector
Business email compromise BEC and ransomware were the top threats observed by Cisco Talos Incident Response Talos IR in the second quarter of 2024, together accounting for 60 percent of engagements. Although there was a decrease in BEC engagements from last quarter, it was still a major threat fo...
SQL Injection Vulnerability in WisdomWater Business Charge Management System of New Day Technology Co. Ltd (CNVD-2024-36424)
Xintian Technology Co., Ltd. is an enterprise mainly engaged in the instrumentation manufacturing industry. A SQL injection vulnerability exists in the WisdomWater WisdomWater Business Charge Management System of Xintian Technology Co. Ltd. that can be exploited by attackers to obtain sensitive...
ForIP Tecnologia Administração PABX SQL注入漏洞
ForIP Tecnologia Administração PABX is a phone system from ForIP Tecnologia. A SQL injection vulnerability exists in ForIP Tecnologia Administração PABX version 1.x. The vulnerability stems from the usuario parameter of the /login page containing a SQL injection vulnerability...
SQL Injection Vulnerability in Yisetong Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-36406)
Yisetong electronic document security management system is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption protection of electronic documents, to prevent internal employees from leaking and externa...
How to Reduce SaaS Spend and Risk Without Impacting Productivity
There is one simple driver behind the modern explosion in SaaS adoption: productivity. We have reached an era where purpose-built tools exist for almost every aspect of modern business and it's incredibly easy and tempting for your workforce to adopt these tools without going through the formal I...
SQL injection vulnerability in the electronic document security management system of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-36673)
Yisetong electronic document security management system is an electronic document security protection software, the system utilizes the driver layer transparent encryption technology, through the encryption protection of electronic documents, to prevent internal employees from leaking and externa...
SQL Injection Vulnerability in Yisaitong Electronic Document Security Management System of Beijing Yisaitong Technology Development Limited Liability Company (CNVD-2024-36535)
Beijing Yisaitong Technology Development Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application service industry. A SQL injection vulnerability exists in the Yisetong Electronic Document Security Management System of Beijing Yisetong Technology Development C...
Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking
--- The relationship between various TDSs and DNS associated with Vigorish Viper and the final landing experience for the user A Chinese organized crime syndicate with links to money laundering and human trafficking across Southeast Asia has been using an advanced "technology suite" that runs the...
Command Execution Vulnerability in RG-UAC 6000-E50 of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-36581)
Beijing StarNet Ruijie Network Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. A command execution vulnerability exists in the RG-UAC 6000-E50 of Beijing StarNet Ruijie Network Technology Co. Ltd. that can be exploited by an attacker t...
Denial of Service Vulnerability in Vastbase G100 Database of Beijing Massive Data Technology Co.
Vastbase G100 is an enterprise-class relational database management system based on openGauss kernel launched by Beijing Massive Data Technology Co. A denial of service vulnerability exists in the Vastbase G100 database of Beijing Massive Data Technology Co. that can be exploited by attackers to...
Unauthorized Access Vulnerability in Mobile System Management at UFIDA Network Technology Co.
UFIDA Network Technology Co., Ltd. is a company whose business scope includes technical development, technical consultation, technology transfer, technical service and technical training of electronic computer software, hardware and external equipment. An unauthorized access vulnerability exists ...
Logic flaw vulnerability in the operation and maintenance management center of Zhejiang Dahua Technology Co.
Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the Operations and Maintenance Management Center of Zhejiang Dahua Technology Co. Ltd. that can be exploited by an...
File Upload Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2024-35419)
Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A file upload vulnerability exists in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. and can be exploited by remote attackers to upload arbitrary...
Meta Halts AI Use in Brazil Following Data Protection Authority's Ban
Meta has suspended the use of generative artificial intelligence GenAI in Brazil after the country's data protection authority issued a preliminary ban objecting to its new privacy policy. The development was first reported by news agency Reuters. The company said it has decided to suspend the...
Intel Dynamic Tuning Technology (DTT) Software May 2024 Security Update
Intel has informed HP of a potential security vulnerability in some Intel® Dynamic Tuning Technology DTT software installer which might allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...
XSS Vulnerability in the Operations Management and Decision Support System of BYU Healthcare Information Technology, Inc.
Beida Medical Information Technology Co., Ltd. is one of the early enterprises engaged in medical informatization in China, and has innovatively launched the CHIS system, intelligent hospital information platform, and Internet hospital supervision platform, and is one of the leading providers and...
Command Execution Vulnerability in UFIDA NC Cloud at UFIDA Network Technology Co.
UFIDA NC Cloud is a large-scale enterprise digitalization platform launched by UFIDA Network Technology Co. A command execution vulnerability exists in UFIDA NC Cloud, which can be exploited by an attacker to execute arbitrary commands...
