Arbitrary File Read Vulnerability in DSKMS

DSKMS is a professional content payment system tailored for enterprise customers by Changsha Deshaun Network Technology Co. DSKMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

VeryFitPro 3.2.8 Insecure Transit

Trovent Security Advisory 2105-01 Unencrypted cleartext transmission of sensitive information Overview Advisory ID: TRSA-2105-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2105-01 Affected product: VeryFitPro Android mobile application...

Arbitrary File Download Vulnerability in Secure Router of Riseconda Technology Development Co.

Focusing on the field of fiber optic broadband access, Riseconda Technology Development Co., Ltd. is committed to the convergence of fiber optic technology, Ethernet technology and broadband access technology. An arbitrary file download vulnerability exists in the security router of Riseconda...

File Upload Vulnerability in the Supervisory Platform of Zhongke Nintu Technology Jiangsu Co.

Nanjing Nintu Information Technology Co., Ltd now renamed as Zhongke Nintu Technology Jiangsu Co., Ltd was founded in August 2009, is a software development and service-oriented enterprise with the technical background of gis laboratory of Hohai University. Its product supervision platform is...

SQL Injection Vulnerability in Farmers' Credit Information System of Nanning Desi Technology Co.

Nanning Desi Technology Co., Ltd, business scope includes computer software development and technical services; computer, office equipment sales and maintenance, etc.. A SQL injection vulnerability exists in the Farmer Credit Information System of Nanning Desi Technology Co. An attacker can utili...

Weak Password Vulnerability in EG1000L of Riptide Networks Inc.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the EG1000L of Ruijie Networks Co. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...

Weak Password Vulnerability in 1000C of Ruijie Networks Co.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the Ruijie Networks Co. 1000C. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...

Weak Password Vulnerability in NBR2000D of Riptide Networks Inc.

Riptide Networks, Inc. is a data communications solutions provider. A weak password vulnerability exists in the NBR2000D of Ruijie Networks Co. An attacker can exploit the vulnerability to log in to the backend of the device and obtain sensitive information...

Agile Development Framework of Shanghai PowerSoft Information Technology Co.

Ltd. is a high-tech enterprise specializing in the research and development of development frameworks and enterprise application system development. A logic flaw vulnerability exists in the Agile Development Framework of PowerSoft Shanghai, which can be exploited by attackers to obtain sensitive...

SQL Injection Vulnerability in Multimedia Information Distribution System of Guangdong Xing Shen Technology Co.

Ltd. is located in Guangzhou Science City, where high-tech enterprises gather, and is an innovative enterprise specializing in the research, development, production and sales of commercial display systems, intelligent robots and other products. Ltd. multimedia information dissemination system SQL...

Unauthorized Access Vulnerability in Serial Port Terminal Server of Beijing Kanghai Times Technology Co.

Ltd. is a private high-tech enterprises, has been committed to the serial communications equipment and network communications products, research and development, production, sales, while providing technical advice and technical services, is a technology, industry and trade as one of the high-tech...

Weak Password Vulnerability in IP-COM Deep Internet Behavior Management of Shenzhen HeWeiShun Network Technology Company Limited (CNVD-2021-43952)

Shenzhen HeWeiShun Network Technology Co., Ltd. business scope includes: network products, communication products, computer software and hardware, integrated circuit technology development, etc.. A weak password vulnerability exists in IP-COM Deep Internet Behavior Management. Attackers utilize t...

SQL Injection Vulnerability in Residency Capacity Building System of Chongqing Yuanqiu Technology Co.

Chongqing Yuanqiu Science and Technology Co., Ltd. is an independent legal entity under the Southwest Information Center of the Ministry of Science and Technology, which is a large-scale intelligence service organization engaged in the collection of medical information and the development of...

Weak Password Vulnerability in Bee.com Internet's Enterprise Flow Control Cloud Router

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. A weak password vulnerability exists in the BeeNet Interconnect Enterprise Flow Control Cloud Router , which can be exploit...

SUSE SLES11 Security Update : openssl1 (SUSE-SU-2019:14171-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14171-1 advisory. - Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases,...

Command Execution Vulnerability in TOTOLINK T10 Router (CNVD-2021-43461)

TOTOLINK is a brand held by Gion Electronics Shenzhen Co., Ltd, founded in 1999, is a Hong Kong-listed high-tech foreign-funded enterprises stock code: HK.8287, one of the world's leading network equipment suppliers. A command execution vulnerability exists in the TOTOLINK T10 router, which can b...

Command execution vulnerability in TOTOLINK T10 router (CNVD-2021-44930)

TOTOLINK is a brand held by Gion Electronics Shenzhen Co., Ltd, founded in 1999, is a Hong Kong-listed high-tech foreign-funded enterprises stock code: HK.8287, one of the world's leading network equipment suppliers. A command execution vulnerability exists in the TOTOLINK T10 router. An attacker...

Command Execution Vulnerability in Zero Degrees of Space at Jiangyin Leader Information Technology Co.

Jiangyin Leader Information Technology Co., Ltd. was founded in 2006 by visiting scholars from the University of Copenhagen, Denmark, is a high-tech enterprise specializing in the development of application management software and Internet application technology development. Jiangyin City Leader...

DarkSide Pwned Colonial With Old VPN Password

It took only one dusty, no-longer-used password for the DarkSide cybercriminals to breach the network of Colonial Pipeline Co. last month, resulting in a ransomware attack that caused significant disruption and remains under investigation by the U.S. government and cybersecurity experts. Attacker...

Unauthorized Access Vulnerability in HP LaserJet Pro M706n

HP LaserJet Pro M706n is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP LaserJet Pro M706n, which can be exploited by attackers to obtain sensitive information...