Unauthorized Access Vulnerability in web3.0 of Central Time Attendance Machine of Entropy Base Technology Co.

Entropy Base Technology Co., Ltd Entropy Base Technology is a national high-tech enterprise specializing in providing smart identity verification, smart entrance/exit management and smart office products and solutions with biometrics as the core technology. Entropy Base Technology Co., Ltd. china...

SQL Injection Vulnerability in Hanvon Face Recognition Attendance Management System of Hanvon Technology Co.

Ltd. is committed to the research and application of intelligent interaction technology in multiple fields. A SQL injection vulnerability exists in the HANWANG Face Recognition Attendance Management System of HANWANG Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Weak Password Vulnerability in the web management platform of China Control Time & Attendance Machine

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. A weak password vulnerability exists in the web-based management platform of ZhongControl Time and Attendance Machine, which c...

Arbitrary File Download Vulnerability in Web Management Platform of Time Attendance Machine of China Control

CCTC Intelligent Technology Co., Ltd. generally refers to Entropy Base Technology Co., Ltd. which is a globally recognized company with biometrics as its core technology. An arbitrary file download vulnerability exists in the web management platform of ZhongControl Attendance Machine, which can b...

Weak Password Vulnerability in Online Fingerprint Time and Attendance System of Beijing Zhongcheng Technology Development Co.

Ltd. is a company in the field of time safety management, venture capital, green agriculture, mining extraction and OEM production. A weak password vulnerability exists in the online fingerprint time and attendance system of Beijing Zhongcheng Technology Development Co. Ltd, which can be exploite...

SQL Injection Vulnerability in Hanvon Face Attendance Management System (CNVD-2021-29069)

Founded in 1998, Hanvon Technology Co., Ltd. is a pioneer in researching, developing, applying and promoting multi-intelligent human-computer interaction technologies and products with the support of key projects such as the Eighth Five-Year Plan, the Ninth Five-Year Plan, the 863 Project, and th...

Kronos Web Time And Attendance Privilege Escalation (CVE-2020-8495)

A privilege escalation vulnerability exists in Kronos Web Time And Attendance. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

SQL Injection Vulnerability in Online Attendance Management System Lite Version of Xiamen OneFinger Intelligent Technology Co.

Xiamen One Finger Intelligent Technology Co., Ltd. is a "double-soft" and "high-tech" enterprise integrating R&D, manufacturing, sales and service. A SQL injection vulnerability exists in the lite version of Xiamen OneFinger Intelligent Technology Co., Ltd's online attendance management system,...

SQL Injection Vulnerability in Hanvon Face Attendance Management System

Ltd. was founded in 1998. As a pioneer in the domestic artificial intelligence industry, Hanvon Technology has been dedicated to the research and application of intelligent interaction technology in multiple fields for more than 20 years. A SQL injection vulnerability exists in Hanvon's Face...

SQL Injection Vulnerability in Attendance Management System of Guangzhou Kemi Intelligent Technology Co.

Kemi Group is a group enterprise with a history of 25 years. Kemi Group has a number of product divisions such as smart locks, system integration, banknote counting machines, cash registers, shredders, mobile office platforms, Kemi Technology, Kemi commercial machinery, Kemi Chemicals, Kemi...

Unauthorized Access Vulnerability in ZKNet Attendance Management System of Beijing Zhongguancun Technology Development Co.

ZKNet Attendance Management System is a cloud service management platform for enterprises, governmental organizations and other industry sectors. Ltd. ZKNet Attendance Management System suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in i.Timex Attendance Management System

i.Timex is a time and attendance management system designed for a wide range of small and large businesses. A SQL injection vulnerability exists in i.Timex Attendance Management System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Dr.ID Access Control and Time Attendance System of ZTE Security Co.

Dr.ID Access Control & Time Attendance System is a system of ZTE Security Co. Dr.ID Access Control & Attendance System of ZTE Security Co. Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2020-3934

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

CVE-2020-3934

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

CVE-2020-3933

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system...

Sql injection

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, contains a vulnerability of Pre-auth SQL Injection, allowing attackers to inject a specific SQL command...

Default credentials

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the cookie, which divulges password to attackers...

CVE-2020-3935

CVE-2020-3935 concerns Taiwan SECOM’s Door Access Control and Personnel Attendance Management system, where user information is stored in cleartext in cookies, exposing passwords to attackers. The NVD and related records assign a CVSSv3.1 base score of 7.5 (HIGH) with NETWORK attack vector and no...

CVE-2020-3933 TAIWAN SECOM CO., LTD. - User Account Enumeration

TAIWAN SECOM CO., LTD., a Door Access Control and Personnel Attendance Management system, allows attackers to enumerate and exam user account in the system...