Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system has information leakage vulnerability

Shijiazhuang Hejia Technology Co., Ltd. is a high-tech enterprise specializing in the development and application of computer room environment and power equipment monitoring system products. Shijiazhuang Hejia Technology Co., Ltd. dynamic ring monitoring system information leakage vulnerability,...

Qtouch has a binary vulnerability (CNVD-2021-51837)

QTouch is a professional cross-platform automation software launched by Wuhan SunTone Intelligent Technology Co. A binary vulnerability exists in Qtouch, which can be exploited by attackers to cause the program to crash...

Weak Password Vulnerability in MTS Transcoding Server of Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to solve the visual communication and management challenges. A weak...

Information leakage vulnerability in the human resources management system of Dongguan Zhiyue Software Technology Co.

Ltd. is a high-tech enterprise with independent intellectual property rights and its own brand, integrating R&D, production, sales and service. There is an information leakage vulnerability in the human resource management system of Dongguan Zhiyue Software Technology Co., Ltd, which can be...

SQL Injection Vulnerability in the Joint Exam Version of Xi'an Runge Electronic Technology Co.

The business scope of Xi'an Runge Electronic Technology Co., Ltd. includes: sales of electronic products, computer software and hardware; computer software, electronic products and so on. Xi'an Runge Electronic Technology Co., Ltd. marking cloud platform joint examination version of the SQL...

SQL Injection Vulnerability in the Online Monitoring System for Pollution Sources of Beijing Wanwei Yingchuang Technology Development Co., Ltd (CNVD-2021-51841)

Beijing Wanwei Yingchuang Technology Development Co., Ltd. is committed to the research, development and application of products and technologies in the field of environmental protection Internet of Things. Beijing Wanwei Yingchuang Technology Development Co., Ltd. pollution source online...

SQL Injection Vulnerability in MSS Streaming Media Server of Suzhou Kodak Technology Co.

Ltd. is a leading provider of video and security products and solutions, committed to video conferencing, video surveillance and a wealth of video application solutions to help all kinds of government and enterprise customers to improve communication and management efficiency. A SQL injection...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-51872)

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to upload webshell, to obtain server privileges...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-51869)

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to upload webshell, to obtain server privileges...

Command Execution Vulnerability in Airspace Technologies WIFISKY Layer 7 Flow Control Router

Shenzhen Airspace Technology Co., Ltd "Airspace Technology" is a network communication equipment supplier rooted in Shenzhen radiation, dedicated to the research and development of network communication equipment products. A command execution vulnerability exists in the Airspace Technology WIFISK...

File Upload Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co., Ltd (CNVD-2021-51871)

PHPOK is a website building content management system to achieve customized open source free website building cms system. Ltd. PHPOK file upload vulnerability, attackers can use the vulnerability to upload webshell, to obtain server privileges...

File upload vulnerability in jeewms (CNVD-2021-49574)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

Unauthorized Access Vulnerability in web3.0 of Central Time Attendance Machine of Entropy Base Technology Co.

Entropy Base Technology Co., Ltd Entropy Base Technology is a national high-tech enterprise specializing in providing smart identity verification, smart entrance/exit management and smart office products and solutions with biometrics as the core technology. Entropy Base Technology Co., Ltd. china...

File Upload Vulnerability in e-office of Shanghai Panavision Network Technology Co.

Panmicro e-office system is a professional collaborative OA software. A file upload vulnerability exists in e-office of Shanghai Panmicro Network Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...

Shanghai Top Thinking Information Technology Co., Ltd ThinkPHP suffers from a deserialization vulnerability (CNVD-2021-49592)

ThinkPHP is developed and maintained by the Shanghai Top Thinking company MVC structure of the open-source PHP framework. ThinkPHP has a deserialization vulnerability that can be exploited by attackers to gain server control privileges...

File Upload Vulnerability in Beijing Bolehoo Technology Co.

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. A file upload vulnerability exists in the website building system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to gain contr...

File upload vulnerability in jeewms (CNVD-2021-49598)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can use the vulnerability to obtain server privileges...

XSS Vulnerability in the Website Building System of Beijing Bolehoo Technology Co.

Beijing Bleihoo Technology Co., Ltd. is a planning, design, production, technology development in one of the oldest website building company. There is an XSS vulnerability in the website builder system of Beijing Bleihoo Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

Weak password vulnerability in the holographic AI network operation and maintenance platform of Shenzhen Wannet Botong Technology Co.(CNVD-2021-50628)

Holographic AI network operation and maintenance platform is a weak power network integrated management platform that integrates computer network, security network, intelligent equipment network management and operation and maintenance. Holographic AI network operation and maintenance platform of...

Why MTTR is Bad for SecOps

Mean time to resolution MTTR is a commonly used metric in the security industry. While it has utility to a business’s risk function, it does not belong in security operations SecOps. First, let us level-set on what reporting is versus metrics. Reporting measures activity and does not drive specif...