SQL Injection Vulnerability in the Unified Management System of Shanghai Inlitech Digital Technology Co.

Ltd. is a company whose business scope includes engaging in technology development in the fields of digital technology, network technology and integrated circuit technology. A SQL injection vulnerability exists in the Unified Management System of Shanghai Inalways Digital Technology Co., Ltd, whi...

CVE-2021-42335 Huachu Digital Technology Co.,Ltd. Easytest - Stored XSS

Easytest bulletin board management function of online learning platform does not filter special characters. After obtaining a user’s privilege, remote attackers can inject JavaScript and execute stored XSS attack...

CVE-2021-37213 Larvata Digital Technology Co. Ltd. FLYGO - Use of Incorrectly-Resolved Name or Reference-2

The check-in record page of Flygo contains Insecure Direct Object Reference IDOR vulnerability. After being authenticated as a general user, remote attackers can manipulate the employee ID and date in specific parameters to access particular employee’s check-in record...

CVE-2021-37211 Larvata Digital Technology Co. Ltd. FLYGO - Stored XSS

The bulletin function of Flygo does not filter special characters while a new announcement is added. Remoter attackers can use the vulnerability with general user’s credential to inject JavaScript and execute stored XSS attacks...

Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49108)

OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...

Binary Vulnerability in OFD Version Reader of Beijing Numerical Network Technology Limited Liability Company (CNVD-2021-49112)

OFD plate reader is a plate reader product based on our own OFD standard. There is a binary vulnerability in OFD Edition Reader of Beijing Numerical Network Technology Co., Ltd. that can be exploited by attackers to cause the program to crash...

Arbitrary File Download Vulnerability in Content Management System of Shandong Jierui Digital Technology Co.

The content management system of Shandong Jieri Digital Technology Co., Ltd. is a website management system used by enterprises and institutions. There is an arbitrary file download vulnerability in the content management system of Shandong Jereh Digital Technology Co. This vulnerability allows...

TVT TD-2308SS-B DVR contains a directory traversal vulnerability

Overview TVT TD-2308SS-B DVR and possibly other models contain a directory traversal vulnerability CWE-22. Description CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' TVT TD-2308SS-B DVR and possibly other models running firmware version 3.2.0.P-3520A-00 conta...