Denial of Service Vulnerability in ForceControl

ForceControl is a general-purpose man-machine visualization monitoring and configuration software, which is the first automation software product in China with distributed real-time database technology as its core. ForceControl has a denial of service vulnerability that can be exploited by...

ForceControl suffers from a denial of service vulnerability (CNVD-2021-24699)

ForceControl is a general-purpose man-machine visualization monitoring and configuration software, which is the first automation software product in China with distributed real-time database technology as its core. ForceControl has a denial of service vulnerability that can be exploited by...

WebAccess/HMI Designer suffers from a denial of service vulnerability (CNVD-2021-24696)

WebAccess/HMI Designer is an integrated human-machine interface development tool. A denial of service vulnerability exists in WebAccess/HMI Designer, which can be exploited by attackers to cause a denial of service...

Weak password vulnerability in H3C WAC380-30

H3C WAC380-30 is a gateway-type wireless controller independently developed by Xinhua San Technologies Co. The H3C WAC380-30 suffers from a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

FUDForum cross-site scripting vulnerability (CNVD-2021-22864)

FUDforum is an open source forum system built on PHP+MySQL/PostgreSQL. A cross-site scripting vulnerability exists in FUDForum 3.1.0. An attacker can exploit this vulnerability to inject JavaScript via the author parameter in index.php...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-24454)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited. An attacker can exploit the vulnerability to obtain...

Denial of Service Vulnerability in KingView

KingView is an industrial configuration software product launched by Beijing Asian Control Technology Development Co. A denial of service vulnerability exists in KingView, which can be exploited by attackers to cause the software to go down...

Null Pointer Dereference Vulnerability in Inventec VT Designer

VT Designer is a screen editing software developed for VK/VT series touch panels by Shenzhen Inventec Electric Co. A null pointer dereference vulnerability exists in VT Designer. An attacker can exploit this vulnerability to cause the program to crash...

New Mirai Variant and ZHtrap Botnet Malware Emerge in the Wild

Cybersecurity researchers on Monday disclosed a new wave of ongoing attacks exploiting multiple vulnerabilities to deploy new Mirai variants on internet connected devices. "Upon successful exploitation, the attackers try to download a malicious shell script, which contains further infection...

Cybozu Office Cross-Site Scripting Vulnerability (CNVD-2021-18061)

Cybozu Office is a Web-based, cross-platform collaboration solution from Cybozu. A cross-site scripting vulnerability exists in e-mail in Cybozu Office. The vulnerability can be exploited to execute arbitrary script in a logged-in user's web browser...

Command Execution Vulnerability in 11AC 1200MBPS Wireless Panel AP of Shenzhen Jixiang Tengda Technology Co Ltd (CNVD-2021-22529)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd. 11AC 1200MBPS Wireless Panel AP has a command execution vulnerability that can be...

Arbitrary File Download Vulnerability in the FireFleece Endpoint Security Management System of Beijing FireFleece Network Technology Co.

FireFleece Endpoint Security Management System is an enterprise version of computer security protection software. Beijing FireWall Network Technology Co., Ltd FireWall Endpoint Security Management System has an arbitrary file download vulnerability that can be exploited by attackers to download...

Information leakage vulnerability in the FireFleece Endpoint Security Management System of Beijing FireFleece Network Technology Co.

FireFleece Endpoint Security Management System is an enterprise version of computer security protection software. Ltd. FireVelvet Terminal Security Management System has information leakage vulnerabilities that can be exploited by attackers to enter the background to obtain sensitive information...

Weak password vulnerability in several Huawei systems

Huawei Technologies Limited, founded in 1987, is headquartered in Longgang District, Shenzhen, Guangdong Province. Huawei is a leading global information and communications technology ICT solutions provider. A weak password vulnerability exists in several Huawei systems, which can be exploited by...

SQL Injection Vulnerability in Schoolfree Psychological Assessment System (CNVD-2021-23552)

School Worry Free Psychological Assessment System is a platform that enables online mental health testing and diagnosis through the Internet. SQL injection vulnerability exists in School Worry-free Psychological Assessment System, which can be exploited by attackers to obtain sensitive informatio...

Unauthorized Access Vulnerability in Enterprise Routers of Chengdu ZhiBee.com Technology Co.

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. An unauthorized access vulnerability exists in the enterprise router of Chengdu ZhiBee.com Technology LLC, which can be...

D-Link DIR-841 Command Injection Vulnerability

The D-Link DIR-841 is an AC1200 MU-MIMO Wi-Fi Gigabit router. A command injection vulnerability exists in /jsonrpc in D-Link DIR-841 3.03, 3.04. An attacker can exploit this vulnerability to inject commands via ping, ping6, or traceroute...

FiberHome HG6245D devices trust management issue vulnerability (CNVD-2021-18373)

FiberHome HG6245D devices is a router from FiberHome, China. It provides network connectivity. A trust management issue vulnerability exists in the FiberHome HG6245D devices, which can be exploited by an attacker to attack vulnerable components using default passwords or hard-coded passwords,...

FUEL CMS Elevation of Privilege Vulnerability

FUEL CMS is a content management system based on CodeIgniter. An elevation of privilege vulnerability exists in FUEL CMS 1.4.7. The vulnerability can be exploited to gain super administrator privileges via the "id" and "fuelid" parameters...

Logic Flaw Vulnerability in Galloping Workflow Engine CCBMP Workflow Management System, Process Designer System

Jinan Chidori Information Technology Co., Ltd. specializes in process engine form engine research and development and innovation. A logic flaw vulnerability exists in the workflow engine CCBMP workflow management system and process designer system. An attacker can utilize the vulnerability to...