Command execution vulnerability in TOTOLINK T10 router (CNVD-2021-44930)

TOTOLINK is a brand held by Gion Electronics Shenzhen Co., Ltd, founded in 1999, is a Hong Kong-listed high-tech foreign-funded enterprises stock code: HK.8287, one of the world's leading network equipment suppliers. A command execution vulnerability exists in the TOTOLINK T10 router. An attacker...

Command Execution Vulnerability in TOTOLINK T10 Router (CNVD-2021-43461)

TOTOLINK is a brand held by Gion Electronics Shenzhen Co., Ltd, founded in 1999, is a Hong Kong-listed high-tech foreign-funded enterprises stock code: HK.8287, one of the world's leading network equipment suppliers. A command execution vulnerability exists in the TOTOLINK T10 router, which can b...

DarkSide Pwned Colonial With Old VPN Password

It took only one dusty, no-longer-used password for the DarkSide cybercriminals to breach the network of Colonial Pipeline Co. last month, resulting in a ransomware attack that caused significant disruption and remains under investigation by the U.S. government and cybersecurity experts. Attacker...

Arbitrary File Download Vulnerability in MPSec ISG1000 Security Gateway of Mapleton Technology Co.

Founded in 1993, Mapletree Technology Co., Ltd. is a leading provider of network products and solutions in China. An arbitrary file download vulnerability exists in the MPSec ISG1000 security gateway of MaplePlus Technology Corporation, which can be exploited by attackers to obtain sensitive...

Unauthorized Access Vulnerability in HP LaserJet Pro M706n

HP LaserJet Pro M706n is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP LaserJet Pro M706n, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in HP Color LaserJet MFP M277n

HP-Color-LaserJet-MFP-M277n is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP Color LaserJet MFP M277n, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in HP Officejet Pro 8600 N911a

HP Officejet Pro 8600 N911a is a printer from HP Trading Shanghai Co. An unauthorized access vulnerability exists in the HP Officejet Pro 8600 N911a, which can be exploited by attackers to obtain sensitive information...

Logic Vulnerabilities in the Lock Group Management System of Jiangsu Esso Electronic Technology Co.

Ltd. is specialized in substation video monitoring system, passive intelligent lock group management system development, power intelligent auxiliary monitoring system, distribution room monitoring system, intelligent access control system, production and sales of high-tech enterprises. Ltd. lock...

Command Execution Vulnerability in Next-Generation Firewall Control System of Shenzhen Zhongke NetWei Technology Co.

Ltd. is a national high-tech enterprise, double-soft enterprise; the earliest domestic VPN research and development manufacturers, professional network security product development vendors. Ltd. next-generation firewall control system has a command execution vulnerability, the attacker can use th...

Arbitrary File Read Vulnerability in Flash Flood Monitoring and Early Warning System of Chengdu Wanjiang Gangli Technology Co.

Founded in 2007, Chengdu Wanjiang Gangli Technology Co., Ltd. is positioned as a full chain service provider of water technology under the framework of artificial intelligence. There is an arbitrary file read vulnerability in the flash flood monitoring and warning system of Chengdu Wanjiang Gangl...

SQL Injection Vulnerability in Cloud Research's Employment Platform

Changsha Yunyan Network Technology Co., Ltd. is an Internet company. A SQL injection vulnerability exists in Cloud Research's employment platform. An attacker can utilize the vulnerability to obtain sensitive database information...

Catalog Traversal Vulnerability in Flash Flood Monitoring and Early Warning System of Beijing Puhua Zhishen Science and Technology Co.

Beijing Puhua Zhishen Technology Co., Ltd, business scope includes technology promotion, basic software services, application software services, etc. A directory traversal vulnerability exists in the flash flood monitoring and early warning system of Beijing Puhua Zhishen Technology Co. An attack...

Unauthorized Access Vulnerability in Service Management Platform of Ortho Software Co.

Ltd. is a software enterprise and high-tech enterprise specializing in the research and development of software for the education industry digital campus information platform series software, system integration and information technology service as the main business. An unauthorized access...

BokeCad has a binary vulnerability

Shenzhen Bock Times Technology Development Co., Ltd. is a company specializing in the research, development and promotion of garment technology. A binary vulnerability exists in BokeCad, which can be exploited by attackers to gain control of the server...

Logic Flaw Vulnerability in CareyShop of Ningbo Humen Technology Co.

CareyShop is a high-performance open source mall framework system based on ThinkPHP framework development. Ningbo Humen Technology Co. CareyShop has a logic flaw vulnerability that can be exploited by an attacker to read the database configuration file...

Command Execution Vulnerability in DC of Log Center Platform of DeepTrust Technology Co.

DeepService Technology Co., Ltd. is a product and service provider specializing in enterprise-class security, cloud computing and infrastructure. A command execution vulnerability exists in the DC of the Log Center platform of DeepService Technology Corporation, which can be exploited by an...

Binary Vulnerability in INVT Workshop (INVT Inverter/Servo Host Monitoring Software)

Since its establishment in 2002, INVISION Shenzhen INVISION Electric Co., Ltd. has been focusing on the two major fields of industrial automation and energy and power, providing users with the most valuable products and solutions. A binary vulnerability exists in INVT Workshop INVT Inverter/Servo...

Weak password vulnerability in PatrolFlow-AM-2530Pro management platform of Beijing Byzoro Network Technology Co.

PatrolFlow-AM-2530Pro management platform is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. A weak password vulnerability exists in the PatrolFlow-AM-2530Pro management platform of Beijing Byzoro Networks Technology Co. Ltd, which can be...

Cybersecurity opportunities for the public and private sectors

Im happy to share a new paper by Cynergy Partners, co-authored by Coalfire board member, Jim Pflaging, titled Cybersecurity Opportunities for the Public and Private Sectors...

JetBrains Code With Me Code Execution Vulnerability

JetBrains Code With Me is a plug-in application from the Czech company JetBrains that provides code co-editing for the IntelliJ IDE. A code execution vulnerability exists in JetBrains Code With Me versions prior to 2021.1. An attacker can exploit the vulnerability to execute code in read-only mod...