Weak Password Vulnerability in Various Products of P&T Technology Co.

TL-IPC223 and so on are webcam products of P&L Technology Co. A weak password vulnerability exists in a number of P&L Technologies Ltd. products, which can be exploited by attackers to obtain sensitive information...

Logic Flaw Vulnerability in Website Building System of Siltronic Ltd.

SCT is an information service provider in China, dedicated to the cause of disaster mitigation and benefit reduction, and provides the government with comprehensive solutions for disaster mitigation and benefit reduction informatization. There is a logic flaw vulnerability in the website building...

Arbitrary File Upload Vulnerability in Merchant Management System of Xiamen Lionfish Network Technology Co.

Xiamen Lionfish Network Technology Co., Ltd. is a company mainly engaged in other Internet services excluding projects subject to licensing approval; wholesale of electrical equipment; wholesale of computers, software and auxiliary equipment; wholesale of communications and broadcasting and...

File Upload Vulnerability in Open Virtual Simulation Experimental Teaching Management Platform Software of Beijing Runier Network Technology Co.

Beijing Runier Network Technology Co., Ltd. is a national high-tech enterprise registered in Beijing Haidian Cultural and Educational Industrial Park based on virtual simulation technology and network technology, mainly engaged in the research, development, sales, integration and service of...

Hackers Using Microsoft Build Engine to Deliver Malware Filelessly

Threat actors are abusing Microsoft Build Engine MSBuild to filelessly deliver remote access trojans and password-stealing malware on targeted Windows systems. The actively ongoing campaign is said to have emerged last month, researchers from cybersecurity firm Anomali said on Thursday, adding th...

Ransomware Is Getting Ugly

Modern ransomware has two dimensions: pay to get your data back, and pay not to have your data dumped on the Internet. The DC police are the victims of this ransomware, and the criminals have just posted personnel records -- "including the results of psychological assessments and polygraph tests;...

Big Cybersecurity Tips For Remote Workers Who Use Their Own Tech

As the total number of people working from home has grown dramatically in the last year or two, so has the number of individuals who use all of their own technology for their jobs. If you're a remote worker who relies on your own PC to get your work done, then you may be at a heightened risk for...

Microsoft Hyper-V Remote Code Execution Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A remote code execution vulnerability exists in Microsoft Hyper-V. No detailed vulnerability details are available at this time...

SQL Injection Vulnerability in the File Server Configuration Management System of UFIDA Network Technology Corporation (CNVD-2021-37324)

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in the File Server Configuration Management System of UFIDA Network Technology Co., Ltd. that can be exploited by...

Weak password vulnerability in Howay SW-26242 of Suzhou Hanming Technology Co.

The Howay SW-26242 is a full Gigabit managed POE switch. Howay SW-26242 of Suzhou Hanming Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in web management interface of Aifei Flow Control Route.

The business scope of All Answers Convergence Network Technology Beijing Co., Ltd. includes: operation of telecommunication business; Internet information service; technology development, technology service, technology consulting, technology transfer, technology promotion and so on. SQL injection...

Weak Password Vulnerability in 26G-2F-MANAGED of Shenzhen WANET Botong Technology Co.

Dedicated to the development and application of network communication products and IoT security control platform, it is a next-generation vendor of intelligent network solutions for weak power and IoT security solutions. Weak password vulnerability exists in 26G-2F-MANAGED of Shenzhen WANET BOTTO...

Unauthorized Access Vulnerability in Hangzhou Tute Information Technology Co.

Hangzhou Tute Information Technology Co., Ltd. is a provider of innovative product solutions and services for medical intelligent operation management and SPD intelligent supply chain of medical materials, "software + big data + intelligent". There is an unauthorized access vulnerability in the...

Information leakage vulnerability in the smart payment platform of Guilin Jiapeng Information Technology Co. Ltd (CNVD-2021-39022)

Guilin Jiapeng Information Technology Co., Ltd. specializes in school fee system development. There is an information leakage vulnerability in Guilin Jiapeng Information Technology Limited smart fee payment platform. Attackers can use the vulnerability to obtain sensitive information...

Security Bulletin: A vulnerability in the IBM® SDK, Java™ Technology Edition affects IBM Tivoli Network Manager CVE-2020-14782.

Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...

Anhui Jingqi Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Anhui Jingqi Network Technology Co., Ltd. was founded in 2006, the company is based on the informatization in the field of civil affairs and health, around the "prevention, treatment and maintenance" to provide the service users in the big health industry chain with intelligent medical care,...

Weak Password Vulnerability in Online Fingerprint Time and Attendance System of Beijing Zhongcheng Technology Development Co.

Ltd. is a company in the field of time safety management, venture capital, green agriculture, mining extraction and OEM production. A weak password vulnerability exists in the online fingerprint time and attendance system of Beijing Zhongcheng Technology Development Co. Ltd, which can be exploite...

Shenzhen Tengxu IOT Technology Co., Ltd. behavioral management system has SQL injection vulnerability

Shenzhen Tengxu IOT Technology Co., Ltd. was founded in August 2013, is a collection of commercial wireless network product research and development design, manufacturing, sales and service as one of the Internet technology companies. Shenzhen Tengfox IOT Technology Co., Ltd. behavioral managemen...

Star (Hangzhou) Network Technology Co., Ltd. cloud digital signage in unauthorized access vulnerability

Cloud digital signage can be fast program production, one-click publishing, wonderful template material easy to apply and so on. Star Hangzhou Network Technology Co., Ltd. cloud digital signage in the unauthorized access vulnerability, attackers can use the vulnerability to obtain sensitive...

Logic Flaw Vulnerability in RAID Management System of Tiandiweiye Technology Co.

Tiandiweiye is the world's leading intelligent security solution provider. Based on artificial intelligence, big data, cloud computing, Internet of Things and other technologies, Tiandiweiye provides intelligent video products, system solutions and high-quality technical services for public...