SQL Injection Vulnerability in Zhejiang Shenda Self-service Machine Management System

Zhejiang Shenda Intelligent Group is a company focusing on providing intelligent tourism whole industry chain product innovation, industrial planning and operation services. A SQL injection vulnerability exists in the Zhejiang Shenda kiosk management system, which can be exploited by attackers to...

Researchers Claim CIA Was Behind 11-Year-Long Hacking Attacks Against China

Qihoo 360, one of the most prominent cybersecurity firms, today published a new report accusing the U.S. Central Intelligence Agency CIA to be behind an 11-year-long hacking campaign against several Chinese industries and government agencies. The targeted industry sectors include aviation...

Zhejiang Yusi industry general video management platform file upload vulnerability

Video surveillance management platform is a set of industry general video management platform developed by Zhejiang YUVAD. A file upload vulnerability exists in Zhejiang YUVAD's industry general video management platform. An attacker can use the vulnerability to upload a webshell and gain server...

File upload vulnerability of network video camera of Zhejiang Yuzhe Technology Co.

Zhejiang YUVAD Technology Co., Ltd. is a global solution provider for public safety and intelligent transportation. A file upload vulnerability exists in the network video camera of Zhejiang YUV Technology, which can be exploited by an attacker to gain administrator privileges of the affected...

SQL injection vulnerability in in***.php page of website building system of Zhejiang Soupai Information Technology Co.

Zhejiang Soupai Information Technology Co., Ltd. a company that provides users with website construction, website promotion, enterprise mailbox, mobile station, micro letter marketing and other types of Internet marketing services. Zhejiang Soupai Information Technology Co., Ltd. building system...

Command Execution Vulnerability in Ziggy's Fortress (CNVD-2019-27736)

Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. A command execution vulnerability exists in Qiji Fortress, which can be exploited by an attacker to gain control of a web server...

SQL Injection Vulnerability in Qiji Fortress se***.php Page

Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. There is a SQL injection vulnerability in the se.php page of Qiji Fortress, which can be exploited by attackers to obtain sensitive...

File Write Vulnerability in Ziggy's Fortress

Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. A file write vulnerability exists in Qiji Fortress, which can be exploited by an attacker to gain control of a web server...

Command Execution Vulnerability in Ziggy's Fortress (CNVD-2019-22668)

Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. A command execution vulnerability exists in Qiji Fortress, which can be exploited by an attacker to execute arbitrary commands...

Weblogic Deserialization, Override Access Vulnerability in Zhejiang Insurance Expense Reimbursement System

CR Nebula is an innovative technology company that pioneered the use of mobile internet technology and experience to "elevate" enterprise-level financial management. A weblogic deserialization, override access vulnerability exists in the Zhejiang Insurance Expense Reimbursement System, which can ...

Heap Overflow Vulnerability in Zhejiang Dahua Playback Library SDK

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A heap overflow vulnerability exists in the Zhejiang Dahua...

Denial of Service Vulnerability in Zhejiang Dahua Playback Library SDK

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A denial of service vulnerability exists in the Zhejiang Dah...

Zhejiang Dahua Playback Library SDK suffers from denial-of-service vulnerability (CNVD-2019-00117)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A denial of service vulnerability exists in the Zhejiang Dah...

SQL Injection Vulnerability in Zhejiang Instant E-commerce Co.

Ltd. is a website construction based on the integration of network marketing, bidding ranking, marketing hosting and other integrated e-commerce network marketing company. Ltd. building system there are SQL injection vulnerabilities, attackers can use the vulnerability to obtain sensitive...

Directory Traversal Vulnerability in Zhejiang Blue Union Technology Mini-Cmts

"Blue Union Technology", founded in 2009, is a high-tech enterprise providing cable TV two-way network transformation solutions. A directory traversal vulnerability exists in Mini-Cmts, which can be exploited by attackers to obtain sensitive information...

Zhejiang Dahua Playback Library SDK suffers from out-of-bounds access vulnerability (CNVD-2018-01924)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. An out-of-bounds access vulnerability exists in mpeg4dec.dll...

Denial of Service Vulnerability in Zhejiang Dahua Playback Library SDK (CNVD-2018-01922)

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A denial-of-service vulnerability exists in dhplay.dll in th...

Denial of Service Vulnerability in Zhejiang Dahua Playback Library SDK

Playback Library SDK is a development kit based on Dahua's private code stream encapsulation protocol developed to serve network DVRs, network video servers, network cameras, network dome cameras, intelligent devices and other products. A denial-of-service vulnerability exists in dhplay.dll in th...

Zhejiang Dahua Playback Library SDK (win32) suffers from an out-of-bounds access vulnerability

Hikvision playback library SDK programming is a Hikvision embedded network DVRs, video servers, equipment related to the playback of the supporting products of the secondary development kit. An out-of-bounds access vulnerability exists in dhplay.dll of the playback library SDK provided by Zhejian...

Zhejiang Dahua DSS 3.0 Security New Platform Exists struts2-045 Remote Code Execution Vulnerability

DSS Digital Surveillance System is a highly integrated and powerful digital surveillance management system developed by Zhejiang Dahua Technology Co. Zhejiang Dahua DSS 3.0 security new platform uses Apache Struts 2 as the web application framework, because the software has a remote code executio...