CVE-2024-26520: Unverified Password Change

An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets...

File upload vulnerability in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co., Ltd (CNVD-2020-70800)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A file upload vulnerability exists in the comprehensive management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to gain server...

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70835)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

SQL Injection Vulnerability in Livestock Comprehensive Management Information Platform of Xinjiang Uygur Autonomous Region Bureau of Animal Husbandry and Veterinary Medicine

The Bureau of Animal Husbandry and Veterinary Medicine of the Xinjiang Uygur Autonomous Region is responsible for the supervision and management of the animal husbandry industry, veterinary drugs and veterinary instruments industry, feed and forage industry, and livestock and poultry slaughtering...