CHYUI 授权问题漏洞

The Chiyu CHIYU BF-430 is a networking server that provides communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu of Taiwan, China. A security vulnerability exists in various CHIYU products, which stems from the fact that the remote login...

SQL Injection Vulnerability in Cscms of Guilin Chongsheng Network Technology Co.

Cscms is a diversified content management system, the use of PHP5 MYSQL as the technical basis for development, the use of OOP object-oriented approach to the basic operation of the framework to build. Guilin Chongsheng Network Technology Co., Ltd Cscms SQL injection vulnerability, attackers can...

Logic flaw vulnerability in jspgou (CNVD-2021-42036)

Jiangxi Jinlei Technology Development Co., Ltd referred to as Jinlei Technology was founded in 2003, Jinlei Technology is a focus on java WEB application software research and development of high-tech enterprises. jspgou there is a logic flaw vulnerability, an attacker can use the vulnerability t...

Logic Flaw Vulnerability in NetMizer Log Management System of Beijing Lingzhou Network Technology Co.

NetMizer Log Management System is a system that records all session logs flowing through the device and transmits them to an external management center. A logic flaw vulnerability exists in the NetMizer Log Management System of Beijing LingZhou Network Technology Co. Ltd, which can be exploited b...

Logic flaw vulnerability in jspgou

Jiangxi Jinlei Technology Development Co., Ltd referred to as Jinlei Technology was founded in 2003, Jinlei Technology is a focus on java WEB application software research and development of high-tech enterprises. jspgou there is a logic flaw vulnerability, an attacker can use the vulnerability t...

CHIYU IoT Devices - 'Telnet' Authentication Bypass

Exploit Title: CHIYU IoT Devices - 'Telnet' Authentication Bypass Date: 01/06/2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, BF-450M, and SEMAC - all firmware...

Is It Time to Consider Replacing Your CDN?

Content delivery networks CDNs are the pipelines of the Internet. Working behind the scenes, they are reshaping how information is consumed online, accelerating web traffic, enhancing user experience, and providing every website with the ability to truly go global. As you may imagine, any...

odix and Microsoft: Protecting users against malware attacks with free FileWall license

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. The fight against malware has become the epic battle of our generation, placing businesses of all sizes against a never-ending stream of hackers and zero-day attacks bent on...

Cybercriminals Hold $115,000-Prize Contest to Find New Cryptocurrency Hacks

A top Russian-language underground forum has been running a "contest" for the past month, calling on its community to submit "unorthodox" ways to conduct cryptocurrency attacks. The forum's administrator, in an announcement made on April 20, 2021, invited members to submit papers that assess the...

Unauthorized Access Vulnerability in Background Management System of Beijing Original Pioneer Network Technology Development Co.

Beijing Original Pioneer Network Technology Development Co., Ltd. is a website network technology service provider. There is an unauthorized access vulnerability in the background management system of Beijing Original Pioneer Network Technology Development Co., Ltd. that can be exploited by an...

Command Execution Vulnerability in Videoconferencing Management System of Zhejiang Dahua Technology Co.(CNVD-2021-41013)

Video Conference Management System is a video cloud conferencing service software developed specifically for small and medium-sized businesses. A command execution vulnerability exists in the Video Conference Management System of Zhejiang Dahua Technology Co. Ltd, which can be exploited by an...

Weak Password Vulnerability in Shengxinta Internet Behavior Management

Shenzhen Xinta Technology Co., Ltd. is a security technology company that specializes in product development. Shengxinta Internet Behavior Management has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in S-CMS Enterprise Website Builder System (CNVD-2021-41053)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a file upload vulnerability in S-CMS, which can be exploited by an attacker to gain control of the server...

Arbitrary File Download Vulnerability in ESearch of Shanghai Panmicro Network Technology Co.

Ltd. is a company focusing on the field of collaborative management software to help organizations build a unified digital office platform. Ltd. ESearch suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Meizu 16s pro has an information leak vulnerability

Meizu 16s pro is a smartphone from Zhuhai Meizu Technology Co. Meizu 16s pro suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Terminal Security System of Beijing Falcon Security Technology Co.

Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical care and grouped enterprises. There is a file uploading vulnerability in the Terminal Security System of Beijing Falcon Security Technology...

Command Execution Vulnerability in BHW L7 Home Gateway

BHW L7 Home Gateway is a home gateway from Beijing BHW Technology Co. A command execution vulnerability exists in the BHW L7 Home Gateway, which can be exploited by an attacker to gain control of the server...

S-CMS enterprise website building system suffers from SQL injection vulnerability (CNVD-2021-41048)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Clinical Browsing System of Bluebonnet Technology Co. Ltd (CNVD-2021-42812)

Bluebonnet Technology Co., Ltd. is a well-known medical information technology solution provider, focusing on the field of medical information technology, product development, sales and service as one of the national high-tech enterprises. A SQL injection vulnerability exists in the clinical...

Command Execution Vulnerability in Shengxinta Internet Behavior Management

Shenzhen Xinta Technology Co., Ltd. is a security technology company that specializes in product development. A command execution vulnerability exists in Shengxinta Internet Behavior Management, which can be exploited by an attacker to gain control of a server...