Arbitrary file deletion

Beijing Wuzhi Internet Technology Co., Ltd. Wuzhi CMS 4.0.1 is an open source content management system. The five fingers CMS backend in.php file has arbitrary file deletion vulnerability. Attackers can use vulnerabilities to delete arbitrary files...

CVE-2020-24930

CVE-2020-24930 affects WuZhi CMS 4.0.1. The vulnerability is an arbitrary file deletion issue in the backend in***.php, allowing attackers to delete arbitrary files. The available connected documents confirm the product/version and the deletion-only impact but do not provide a concrete root-cause...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2023-17601)

WUZHI CMS is a PHP and MySQL based Content Management System CMS from Beijing WuZHI Technology Co. The vulnerability can be exploited by remote attackers to perform cross-site scripting attacks via the "email username" parameter in "index.php"...

Command Execution Vulnerability in NetGuard Security Management Platform of Beijing NetGuard Nebula Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

Command Execution Vulnerability in the Enterprise-Side Internet Integrated Management Platform of Beijing Yahong Century Technology Development Co.

Ltd. is a high-tech company specializing in Internet spatial data governance, network and information security and data value-added solutions and services. A command execution vulnerability exists in the enterprise-side Internet integrated management platform of Beijing Yahong Century Science and...

Information Leakage Vulnerability in SSL VPN of Beijing NetGalaxy Information Technology Co.

Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...

File Containment Vulnerability in NBR_RGOS 11.9 of Beijing StarNet Ruijie Network Technology Co.

Beijing StarNet Ruijie Network Technology Co., Ltd. is a company mainly engaged in information system integration services; Internet virtual private network services; Internet management services and other projects. A file inclusion vulnerability exists in NBRRGOS 11.9 of Beijing StarNet Ruijie...

The Olympics: a timeline of scams, hacks, and malware

The 2020 Olympics are, after a bit of a delayed start, officially in full swing. So too is the possibility for scammers to crawl out of the woodwork. And while actual, measurable cyberrattacks and hacks surrounding The Olympics did not truly get rolling until 2008 in Beijing, The Olympic games ha...

SQL Injection Vulnerability in Tongda OA Version 11.10 Server Side

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Arbitrary File Download Vulnerability in PatrolFlow Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Network Technology Co.

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. PatrolFlow Multi-service Security Gateway Intelligent Management Platform of Beijing Byzoro Networks Technology Co., Ltd. suffers from an arbitrary file download...

Binary vulnerability in DocuCom pdf reader (CNVD-2021-54060)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Binary vulnerability in DocuCom pdf reader (CNVD-2021-54059)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in the Enterprise Process Control System of Beijing Space and Time Zhiyou Technology Co.

Ltd. is a company whose business scope includes technology development, technology promotion, technology transfer, technology consulting, technology service and so on. There is an unauthorized access vulnerability in the enterprise process control system of Beijing Space Time Zhiyou Technology Co...

Weak Password Vulnerability in Beijing Byzoro Networks Smart S200

Beijing Byzoro Networks Technology Co., Ltd Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet by providing a full range of security solutions for industry users around the direction of network security business. Beijing Byzoro Networks Smart S200...

Unauthorized Access Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co., Ltd (CNVD-2021-56793)

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. An unauthorized access vulnerability exists in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by attacker...

Binary vulnerability in DocuCom pdf reader (CNVD-2021-54058)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Binary vulnerability in DocuCom pdf reader (CNVD-2021-54057)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Command Execution Vulnerability in NBR2000D of Beijing StarNet Ruijie Network Technology Co.

NBR1500D is an enterprise router from Beijing StarNet Ruijie Network Technology Co. A command execution vulnerability exists in the NBR2000D of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to execute commands...

Logic Flaw Vulnerability in Homs 5.0 Monitoring Center

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Homs5.0 monitoring center has a logic flaw vulnerability,...

SQL Injection Vulnerabilities in Various Products of Beijing Zibang International Software Technology Co.

Ltd. is an enterprise management software developer and service provider. SQL injection vulnerability exists in a number of products of Beijing Jibang International Software Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the database...