SQL Injection Vulnerability in Engineering Enterprise Management Platform of Chongqing Panopto Software Company Limited (CNVD-2021-47187)

Engineering Enterprise Management is an integrated web-based information platform that incorporates all the operations of the engineering enterprise company and the project department. There is a SQL injection vulnerability in the engineering enterprise management platform of Chongqing PPC Softwa...

Unauthorized Access Vulnerability in Samsung C145x Series

The Samsung C145x Series is a printer from Samsung China Investment Co. An unauthorized access vulnerability exists in the Samsung C145x Series, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Engineering Enterprise Management Platform of Chongqing Panopto Software Co. Ltd (CNVD-2021-47188)

Engineering Enterprise Management is an integrated web-based information platform that incorporates all the operations of the engineering enterprise company and the project department. There is a SQL injection vulnerability in the engineering enterprise management platform of Chongqing Panoptic...

Unauthorized Access Vulnerability in PowerLogic ION7550 of Schneider Electric (China) Co.

Schneider Electric China Co., Ltd. is a global leader in energy efficiency management. Its main businesses include power, industrial automation, infrastructure, energy saving and efficiency, energy, building automation and security electronics, data centers and intelligent living spaces. An...

Command Execution Vulnerability in HG6145D at Wuhan Fiberhome Information Integration Technology Co.

HG6145D is a Gigabit Passive Fiber Optic Access User Unit GPON ONU of Fiberhome Communication Technology Co. A command execution vulnerability exists in the HG6145D of Wuhan Fiberhome Information Integration Technology Co. that can be exploited by an attacker to gain control of the server...

Unauthorized Access Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

Unauthorized Access Vulnerability in Fuji Xerox (China) Limited DocuCentre-IV C2265

Fuji Xerox China Co., Ltd. was established on January 3, 1995 as a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in Fuji Xerox China Limited...

Logic Flaw Vulnerability in Mingguo APT Attack (Cyber Warfare) Warning Platform

Hangzhou ACE Information Technology Co., Ltd. is a company that has been focusing on the research, development, production and sales of products in the field of network information security, such as Fortress, Remote Monitoring, Cloud Saas Service, Cloud WAF, Industrial Control, Online Remote Offi...

Unauthorized Access Vulnerability in Fuji Xerox (China) Limited DocuCentre-IV 3060

Fuji Xerox China Co., Ltd. was established on January 3, 1995 as a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in the Fuji Xerox China Limited...

Unauthorized Access Vulnerability in PowerLogic ION8650 at Schneider Electric (China) Co.

Schneider Electric China Co., Ltd. is a global leader in energy efficiency management, founded by the Schneider brothers in 1836. Its main businesses include power, industrial automation, infrastructure, energy saving and efficiency, energy, building automation and security electronics, data...

Command Execution Vulnerability in the Operation and Maintenance Audit System of Beijing COSCO Kirin Technology Co.

Beijing COSCO KyLin Technology Co., Ltd. is a software development company mainly focusing on R&D. The main products of the company are COSCO KyLin Barrier Machine, KyLin SSL VPN, KyLin Dynamic Password System, KyLin Cloud Desktop and so on. A command execution vulnerability exists in the operati...

Unauthorized Access Vulnerability in WorkCentre 7120 of Fuji Xerox (China) Co.

Fuji Xerox China Co., Ltd. was established on January 3, 1995 as a wholly-owned holding company of Fuji Xerox in China with a registered capital of US$39 million. Fuji Xerox China Co., Ltd. is headquartered in Beijing. An unauthorized access vulnerability exists in the WorkCentre 7120 of Fuji Xer...

Logic Vulnerabilities in the New Business Warfare Sandbox System of Xindao Technology Co.

New Way Technology Co., Ltd. is an enterprise management software and enterprise Internet service provider. A logic vulnerability exists in the Xindao New Business Warfare Sandbox system of Xindao Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Information leakage vulnerability in Goldwind Ecom interface management platform

Ltd. is a leading provider of total solutions for medical informatization in China. An information leakage vulnerability exists in Goldwind EasTone's interface management platform. An attacker can exploit the vulnerability to obtain sensitive information...

Arbitrary File Download Vulnerability in Built-in Reports of Renton Network Security Management System

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file download vulnerability exists in the built-in...

SQL Injection Vulnerability in Huatian Power OA Office System

Huatian Power OA8000 system is a collaborative office software developed by Dalian Huatian Software Co. The Huatian Power OA8000 system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in netcall of Hangzhou Xinzhongda Technology Co.

netcall is an instant messaging software developed by New CUHK based on the open source communication protocol xmpp. A SQL injection vulnerability exists in netcall of Hangzhou Xinzhongda Science and Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the...

Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system with command execution vulnerabilities

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system there is a command execution vulnerability , attackers can...

XSS Vulnerability in Cyberdocuments (CNVD-2021-45738)

Ltd. formerly known as Anhui Zhongke Daxunfei Information Technology Co., Ltd, the company is headquartered in Hefei, was founded on December 30, 1999, and was changed to KD Xunfei Co., Ltd. on April 18, 2014, which specializes in intelligent voice and language technology research, software and...

SQL Injection Vulnerability in Traceability Management System of Heilongjiang Ligao Technology Co.

Heilongjiang Ligao Technology Co., Ltd. is the only total solution provider in the industry. A SQL injection vulnerability exists in the traceability management system of Heilongjiang Ligao Technology Co., Ltd. and can be exploited by attackers to obtain sensitive information from the database...