Weak password vulnerability in NR255P of Shenzhen Leike Industry Co.

NR255P is a new generation of high-performance QOS router developed by Shenzhen Lei Ke Industry Co., Ltd. which is specially tailored for small businesses, tiny Internet cafes and rental houses. Shenzhen Leike Industry Co., Ltd NR255P has a weak password vulnerability, which can be exploited by...

Command Execution Vulnerability in e-mobile

e-mobile is a mobile office product developed by Shanghai Panmicro Networks Technology Co., Ltd. and is specially designed for cell phone, tablet PC and other mobile terminal users to create a mobile office product. A command execution vulnerability exists in e-mobile, which can be exploited by a...

Stored XSS Vulnerability in TongWeb Management Console at Beijing Orientop Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. A stored XSS vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information such as user cookies...

SOYAL 701Client 9.0.1 Insecure Permissions

SOYAL 701Client 9.0.1 Insecure Permissions Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: 9.0.1 190410 9.0.1 190115 Summary: 701 Client is the user interface software for the access control system. It is used for adding and...

SOYAL Biometric Access Control System 5.0 Weak Default Credentials

SOYAL Biometric Access Control System 5.0 Weak Default Credentials Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: AR-727 i/CM - F/W: 5.0 AR837E/EF - F/W: 4.3 AR725Ev2 - F/W: 4.3 191231 AR331/725E - F/W: 4.2 AR837E/EF - F/W: 4...

SOYAL 701 Server 9.0.1 - Insecure Permissions Vulnerability

Exploit Title: SOYAL 701 Server 9.0.1 - Insecure Permissions Exploit Author: LiquidWorm Vendor Homepage: https://www.soyal.com.tw https://www.soyal.com Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: 9.0.1 190322 8.0.6 181227...

Unauthorized Access Vulnerability in TongWeb Management Console of Beijing Orientop Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. An unauthorized access vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...

SOYAL 701 Client 9.0.1 - Insecure Permissions Vulnerability

Exploit Title: SOYAL 701 Client 9.0.1 - Insecure Permissions Exploit Author: LiquidWorm Vendor Homepage: https://www.soyal.com.tw https://www.soyal.com Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: 9.0.1 190410 9.0.1 190115...

SOYAL 701 Server 9.0.1 - Insecure Permissions

Exploit Title: SOYAL 701 Server 9.0.1 - Insecure Permissions Date: 25.01.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.soyal.com.tw https://www.soyal.com Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: 9.0.1...

SOYAL 701 Client 9.0.1 - Insecure Permissions

Exploit Title: SOYAL 701 Client 9.0.1 - Insecure Permissions Date: 25.01.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.soyal.com.tw https://www.soyal.com Vendor: SOYAL Technology Co., Ltd Product web page: https://www.soyal.com.tw | https://www.soyal.com Affected version: 9.0.1...

SOYAL Biometric Access Control System 5.0 CSRF Change Admin Password

Summary Soyal Access systems are built into Raytel Door Entry Systems and are providing access and lift control to many buildings from public and private apartment blocks to prestigious public buildings. Description The application interface allows users to perform certain actions via HTTP reques...

SOYAL 701Client 9.0.1 Insecure Permissions

Summary 701 Client is the user interface software for the access control system. It is used for adding and deleting tokens, setting door groups for access, setting time zones for limiting access and monitoring ingress and egress on a live system, among other things. Description The application...

Null Pointer Dereference Vulnerability in Inventec VT Designer (CNVD-2021-24483)

VT Designer is a screen editing software developed for VK/VT series touch panels by Shenzhen Inventec Electric Co. A null pointer dereference vulnerability exists in VT Designer. An attacker can exploit this vulnerability to cause the program to crash...

Unauthorized Access Vulnerability in Homs5.0 Monitoring Center of Beijing Shuoren Times Technology Co.

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Beijing Shuoren Times Technology Co., Ltd Homs5.0 monitoring...

SQL Injection Vulnerability in IDH Heat Network Monitoring and Management Platform of Beijing Shuo Ren Times Technology Co.

Beijing Shuoren Times Technology Co., Ltd. is one of the leading high-tech enterprises in the heating industry. Beijing Shuoren Times Technology Co., Ltd. IDH heat network monitoring and management platform there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in Pinto Distribution Platform of Guangzhou Pinto Internet Co.

Guangzhou Pinto Internet Co., Ltd. is an Internet company invested and held by Pearl River Shipping Enterprises Co. Ltd. A SQL injection vulnerability exists in the Pinto Distribution Platform of Guangzhou Pinto Internet Limited, which can be exploited by attackers to obtain sensitive information...

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

Unauthorized access vulnerability in the background management system of Nanjing Jiuzhe Software Technology Co.

Nanjing Jiuzhe Software Technology Co., Ltd. is a mobile Internet customized software service provider. There is an unauthorized access vulnerability in the back-end management system of Nanjing Jiuzhe Software Technology Co...

Securing and governing data in a new hybrid work reality

The past year has led to an evolution in not only how we think about work, but more importantly, where work gets done. Arguably, gone are the days that your organization’s data is limited to the protected confines of your corporate network as your people continue to work remotely, return in some...

Extreme PDF Reader suffers from a denial of service vulnerability (CNVD-2021-17329)

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has a denial-of-service vulnerability that can be exploited by attackers to cause the program to crash...