Changzhou Qingzhifeng Network Technology Co., Ltd. website building system has logical flaws and loopholes

Changzhou Qingzhifeng Network Technology Co., Ltd. is engaged in website production, network marketing planning, software development and other services, is Changzhou, Taizhou, Lianyungang, Yangzhou area Baidu marketing service center. Changzhou Qingzhifeng Network Technology Co., Ltd. website...

SQL Injection Vulnerability in the Website Building System of Beijing Nightcat Network Technology Co.

Beijing Nightcats Network Technology Co., Ltd. is a company that specializes in providing website building services to users. There is a SQL injection vulnerability in the website building system of Beijing Nightcats Network Technology Co. Ltd, which can be exploited by attackers to obtain...

Mogul Interactive PC Enterprise Website System Backend Exists Vulnerability of Ultra-rights Access

Xi'an Mogul Interactive Technology Co., Ltd. is to provide a series of services for enterprises from website building analysis, web design, website optimization and so on. Xi'an Mogul Interactive Technology Co., Ltd. website building system has a vulnerability of unauthorized access. Attackers ca...

Malware can fully compromise building control systems

By Waqas Enterprise security vendor ForeScout’s operational technology research unit has developed a PoC Proof-of-Concept malware that exposed the vulnerabilities in building automation systems BAS by compromising them due to the presence of two very critical bugs in the BAS's PLC programmable...

SQL Injection Vulnerability in Website Building System of Zhongshan Shangyou Network Technology Co.

Zhongshan Shangyou Network Technology Co., Ltd. is a company dedicated to Internet branding and Internet marketing. There is a SQL injection vulnerability in the website building system of Zhongshan Shangyou Network Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

Changsha Saillian Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Changsha Sailian Network Technology Co. There is a SQL injection vulnerability in the website building system of Changsha Sailian Network Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the database...

3 Infosec Reflections to Kick off 2019 & Finally Shift the Balance of Power Back to Defenders

Wow. It's already 2019. Talk about a year in 2018 that flew by! I won’t spend this entire blog talking about 2018 but, needless to say, a lot happened in 2018 and it doesn’t look to slow down anytime soon. This time of year, I like to stop and reflect on the previous year and think about moving...

SUSE SLES12 Security Update : nodejs6 (SUSE-SU-2018:1892-1)

This update for nodejs6 to version 6.14.3 fixes the following issues: The following security vulnerability was addressed : - Fixed a denial of service DoS vulnerability in Buffer.fill, which could hang when being called CVE-2018-7167, bsc1097375. The following other changes were made : - Use...

Security update for containerd, docker and go (important)

This update for containerd, docker and go fixes the following issues: containerd and docker: - Add backport for building containerd bsc1102522, bsc1113313 - Upgrade to containerd v1.1.2, which is required for Docker v18.06.1-ce. bsc1102522 - Enable seccomp support fate325877 - Update to container...

SQL Injection Vulnerability in the Website Building System of Beijing Feirui Technology Co.

Beijing Feirui Technology Co., Ltd. is an Internet technology service provider. A SQL injection vulnerability exists in the website building system of Beijing Feirui Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Beijing Yiwei Cloud Data Technology Co., Ltd. website building ABC website building system has xss vulnerability

Beijing Yiwei Cloud Data Technology Co., Ltd. is an innovative enterprise focusing on providing Internet basic data services and data operation for small and medium-sized enterprises. Beijing Yiwei Cloud Data Technology Co., Ltd. station building ABC station building system exists xss...

SQL injection vulnerability in zzzphp V1.5.9 zzz***.php page

zzphp is a free website building system developed using PHP. zzzphp V1.5.9 version zzz.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Enzong Technology's Website Building System

Tianjin EnZhong Technology Development Co., Ltd. is a network application service operator and a top Internet industry solution company in China. There is a SQL injection vulnerability in EnZone's website building system, which can be exploited by attackers to obtain sensitive information from th...

Command Execution Vulnerability in ESPCMS

ESPCMS is an enterprise building management system based on PHP+MYSQL. A command execution vulnerability exists in ESPCMS. The vulnerability stems from the program's failure to escape and filter strings when calling the eval function to process strings obtained from parameters, which can be...

S-CMS School Building System SQL injection vulnerability in front-end ed***/fo***.php page

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the ed/fo.php page of S-CMS School Building System. Attackers can use the vulnerability to...

HuCart im***.php file has an arbitrary file deletion vulnerability

HuCart HuCart is an open source enterprise building system. HuCart im.php file exists arbitrary file deletion vulnerability , attackers can exploit the vulnerability to delete any file site...

Hangzhou Lebang website building system has SQL injection vulnerability

Hangzhou Lebang Technology Co., Ltd. is an Internet digital service integration organization integrating website mobile platform construction, mobile application development, network marketing integration and operation outsourcing. A SQL injection vulnerability exists in the Hangzhou Lebang websi...

Jinan Jiefei Software Co., Ltd. website building system has SQL injection vulnerabilities

Jinan Jiefei Software Co., Ltd. is to provide customers with out website construction, management, maintenance system and so on. A SQL injection vulnerability exists in the website building system of Jinan Jiefei Software Co. An attacker can use the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in DaCong Network Technology Company's Website Building System

DaCong Network Technology Inc. is an Internet technology service company. A SQL injection vulnerability exists in the website building system of DaCong Network Technology Company. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in Website Building System of Shenzhen Zhongwang Internet Technology Development Co.

Ltd. is a one-stop Internet service provider that focuses on web application development and visual design, supplemented by online interactive brand marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zhongwang Internet Technology Development Co. Attackers...