Arbitrary File Download Vulnerability in MPSec ISG1000 Security Gateway of Mapleton Technology Co.

Founded in 1993, Mapletree Technology Co., Ltd. is a leading provider of network products and solutions in China. An arbitrary file download vulnerability exists in the MPSec ISG1000 security gateway of MaplePlus Technology Corporation, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in HP Officejet Pro 8600 N911a

HP Officejet Pro 8600 N911a is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP Officejet Pro 8600 N911a, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in HP Color LaserJet MFP M277n

HP-Color-LaserJet-MFP-M277n is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP Color LaserJet MFP M277n, which can be exploited by attackers to obtain sensitive information...

Logic Vulnerabilities in the Lock Group Management System of Jiangsu Esso Electronic Technology Co.

Ltd. is specialized in substation video monitoring system, passive intelligent lock group management system development, power intelligent auxiliary monitoring system, distribution room monitoring system, intelligent access control system, production and sales of high-tech enterprises. Ltd. lock...

Command Execution Vulnerability in Next-Generation Firewall Control System of Shenzhen Zhongke NetWei Technology Co.

Ltd. is a national high-tech enterprise, double-soft enterprise; the earliest domestic VPN research and development manufacturers, professional network security product development vendors. Ltd. next-generation firewall control system has a command execution vulnerability, the attacker can use th...

SQL Injection Vulnerability in Cloud Research's Employment Platform

Changsha Yunyan Network Technology Co., Ltd. is an Internet company. A SQL injection vulnerability exists in Cloud Research's employment platform. An attacker can utilize the vulnerability to obtain sensitive database information...

Catalog Traversal Vulnerability in Flash Flood Monitoring and Early Warning System of Beijing Puhua Zhishen Science and Technology Co.

Beijing Puhua Zhishen Technology Co., Ltd, business scope includes technology promotion, basic software services, application software services, etc. A directory traversal vulnerability exists in the flash flood monitoring and early warning system of Beijing Puhua Zhishen Technology Co. An attack...

Arbitrary File Read Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. There is an arbitrary file read vulnerability in the flash flood monitoring and warning system of Chengdu Wanjiang Gangl...

Unauthorized Access Vulnerability in Service Management Platform of Ortho Software Co.

Ltd. is a software enterprise and high-tech enterprise specializing in the research and development of software for the education industry digital campus information platform series software, system integration and information technology service as the main business. An unauthorized access...

BokeCad has a binary vulnerability

Shenzhen Bock Times Technology Development Co., Ltd. is a company specializing in the research, development and promotion of garment technology. A binary vulnerability exists in BokeCad, which can be exploited by attackers to gain control of the server...

Logic Flaw Vulnerability in CareyShop of Ningbo Humen Technology Co.

CareyShop is a high-performance open source mall framework system based on ThinkPHP framework development. Ningbo Humen Technology Co. CareyShop has a logic flaw vulnerability that can be exploited by an attacker to read the database configuration file...

Command Execution Vulnerability in DC of Log Center Platform of DeepTrust Technology Co.

DeepService Technology Co., Ltd. is a product and service provider specializing in enterprise-class security, cloud computing and infrastructure. A command execution vulnerability exists in the DC of the Log Center platform of DeepService Technology Corporation, which can be exploited by an...

Binary Vulnerability in INVT Workshop (INVT Inverter/Servo Host Monitoring Software)

Since its establishment in 2002, INVISION Shenzhen INVISION Electric Co., Ltd. has been focusing on the two major fields of industrial automation and energy and power, providing users with the most valuable products and solutions. A binary vulnerability exists in INVT Workshop INVT Inverter/Servo...

Weak password vulnerability in PatrolFlow-AM-2530Pro management platform of Beijing Byzoro Network Technology Co.

PatrolFlow-AM-2530Pro management platform is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. A weak password vulnerability exists in the PatrolFlow-AM-2530Pro management platform of Beijing Byzoro Networks Technology Co. Ltd, which can be...

Cybersecurity opportunities for the public and private sectors

Im happy to share a new paper by Cynergy Partners, co-authored by Coalfire board member, Jim Pflaging, titled Cybersecurity Opportunities for the Public and Private Sectors...

JetBrains Code With Me Code Execution Vulnerability

JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. A code execution vulnerability exists in JetBrains Code With Me versions prior to 2021.1. An attacker can exploit the vulnerability to execute code in read-only mod...

Unspecified Vulnerability in JetBrains Code With Me

JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. A security vulnerability exists in JetBrains Code With Me versions prior to 2021.1. An attacker can exploit the vulnerability to open a browser on the host computer...

SQL Injection Vulnerability in qwadmin of Beijing Chave Network Technology Co. Ltd (CNVD-2021-37972)

qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Weak Password Vulnerability in Various Products of P&T Technology Co.

TL-IPC223 and so on are webcam products of P&L Technology Co. A weak password vulnerability exists in a number of P&L Technologies Ltd. products, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in Howay SW-26242 of Suzhou Hanming Technology Co.

The Howay SW-26242 is a full Gigabit managed POE switch. Howay SW-26242 of Suzhou Hanming Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...