Shenzhen Edmansi Technology Co., Ltd. soft Xietong ch***.jsp page exists sql injection vulnerability

SoftAssociate is a set of association office management software customized and developed specifically for software industry associations. Shenzhen Edmans Technology Co., Ltd. soft association through the ch.jsp page there is a sql injection vulnerability, the attacker can use the vulnerability t...

File Upload Vulnerability in JTBC Web Content Management System (PHP) at Shanghai SevenWise Network Technology Co.

JTBC Web Content Management System PHP is a website system that can expand and clone existing modules. Ltd. JTBC Web Content Management System PHP has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Weak Password Vulnerability in Multiple Systems of Beijing Shuo Ren Times Technology Co.

Beijing Shuoren Times Technology Co., Ltd. is one of the leading high-tech enterprises in the heating industry. Beijing Shuoren Times Technology Co., Ltd. multiple systems exist weak password vulnerability, attackers can use the vulnerability to obtain sensitive information...

Information Leakage Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is an information leakage vulnerability in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by...

SQL Injection Vulnerability in Website Building System of Heilongjiang Ligao Technology Co.

Heilongjiang Ligao Technology Co., Ltd. is a company that provides safe food production and quality control solutions for food companies. A SQL injection vulnerability exists in the website building system of Heilongjiang Ligao Technology Co. Ltd, which can be exploited by attackers to obtain...

File Upload Vulnerability in MCms of Jiangxi Minsoft Technology Co. Ltd (CNVD-2021-36509)

MCms is an open source content management system. Ltd. MCms file upload vulnerability, an attacker can use the vulnerability to obtain control of the server...

Command execution vulnerability in U8 cloud of UFIDA Network Technology Co.

U8 cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A command execution vulnerability exists in UFIDA U8 cloud, which can be exploited by an attacker to gain control of the...

Shenzhen Edmansi Technology Co., Ltd. soft Xietong there are information leakage vulnerabilities

SoftAssociate is a set of association office management software customized and developed specifically for software industry associations. Shenzhen Edmansi Technology Co., Ltd. soft Xietong there is an information leakage vulnerability, attackers can use the vulnerability to obtain sensitive...

Nanjing Haoguan Technology Co., Ltd. building system there are logical flaws vulnerability

Nanjing Hao Guan Technology Co., Ltd. is mainly engaged in website construction, website optimization and promotion, computer machine and accessories sales, monitoring and security, audio and lighting, LED screen and other weak power engineering. Nanjing Hao Guan Technology Co., Ltd. station...

LIVE Webinar — The Rabbit Hole of Automation

The concept of automation has taken on a life of its own in recent years. The idea is nothing new, but the current interest in automation is a mix of both hype and innovation. On the one hand, it's much easier today to automate everything from small processes to massive-scale tasks than it's ever...

Security Bulletin: A vulnerability in the IBM® SDK, Java™ Technology Edition affects IBM Tivoli Network Manager CVE-2020-14782.

Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.2, which was disclosed in the Oracle October 2020 Critical Patch Update, but deferred until the release associated with the IBM February 2021 Critical Patch...

CVE-2021-32544 Intelligent global technology Ltd, igt+ - DOM-based Cross-Site Scripting

Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can inject malicious JavaScript and carry out DOM-based XSS Cross-site scripting attacks...

PAX Technology PAXSTORE Information Disclosure Vulnerability

PAX Technology PAXSTORE is an application from China PAX PAX Inc. An ecosystem that connects 2.5 million terminals, thousands of application developers and 180+ markets in 80+ countries worldwide. An information disclosure vulnerability exists in Pax Technology PAXSTORE version v7.0.8202005111715...

Speculative Execution and Indirect Branch Prediction Side Channel Analysis Method

Summary: Updated Recommendations Section 04/04/2018 Today a team of security researchers disclosed several software analysis methods that, when used for malicious purposes, have the potential to improperly gather sensitive data from many types of computing devices with many different vendors’...

Shining a Light on DARKSIDE Ransomware Operations

Update May 14: Mandiant has observed multiple actors cite a May 13 announcement that appeared to be shared with DARKSIDE RaaS affiliates by the operators of the service. This announcement stated that they lost access to their infrastructure, including their blog, payment, and CDN servers, and wou...

SQL Injection Vulnerability in Residency Standardized Training Platform of Chongqing Yuanqiu Technology Co.

Residency standardized training platform is a large-scale residency training platform for basic education, clinical guidance, assessment and training of residents in one. A SQL injection vulnerability exists in the residency training platform of Chongqing Yuanqiu Technology Co. An attacker can...

PT-2021-3149 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to the incorrect management of code generation in the implementation of OLE Automation technology in Microsoft Windows. This can be exploited by a remote...

MDR Vendor Must-Haves, Part 10: Included Security Orchestration and Automation

This blog post is part of an ongoing series about evaluating Managed Detection and Response MDR providers. For more insights, check out our guide, “10 Things Your MDR Service Must Do.” Cybersecurity teams continue to be challenged by resource constraints and disconnected toolsets. One method of...

SQL Injection Vulnerability in UTP-R3050-5GP of Shenzhen Utep Technology Co.

Founded in 2005, UTEPO is an industrial communication and intelligent Internet of Things solution provider with "Netpower" technology as the core. Based on technological innovation, UTEPO provides intelligent Internet of Things solutions in the fields of smart parks, smart security, smart cities,...

Command Execution Vulnerability in NETSYS

Founded in 2004, Shenzhen Domain Technology Co., Ltd. is a national high-tech enterprise specializing in the research and development, production, sales and service of products in the field of network information security. NETSYS has a command execution vulnerability that can be exploited by an...