CVE-2020-12732: Initialization of a Resource with an Insecure Default

DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetionxxxxxxxx with a password of 12345678...

DEPSTECH WiFi Digital Microscope 安全漏洞

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenzhen Deepsea Innovation Technology Co. A security vulnerability exists in the DEPSTECH WiFi Digital Microscope 3, which stems from the device allowing TELNET connections using the molinkadmin password for the molink...

SQL Injection Vulnerability in iDS Networked Digital Signage Management System of Shenzhen Bright Diamond Technology Co.

iDS Networked Digital Signage Management System is a kind of digital signage management system that can be used for program management and terminal management. iDS Networked Digital Signage Management System of Shenzhen Bright Diamond Technology Co., Ltd. suffers from SQL injection vulnerability,...

SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Group Co.

Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to industry software research and development, promotion and service. There is a SQL injection vulnerability in the Digital Campus Management System of Anhui Kexun Education Equipment Group Co., Ltd, whi...

CVE-2020-12734: Missing Authorization

DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Default settings...

PT-2021-9472

Name of the Vulnerable Software and Affected Versions DEPSTECH WiFi Digital Microscope version 3 Description The issue allows remote attackers to change the SSID and password of the device, potentially leading to a ransom demand from the rightful device owner. This is due to the lack of a reset...

PT-2021-9470

Name of the Vulnerable Software and Affected Versions DEPSTECH WiFi Digital Microscope version 3 Description The issue concerns the use of a default SSID and password in the WiFi Digital Microscope 3. The default SSID is 'Jetion xxxxxxxx' with a password of '12345678'. Recommendations For DEPSTEC...

Microsoft delivers comprehensive solution to battle rise in consent phishing emails

Microsoft threat analysts are tracking a continued increase in consent phishing emails, also called illicit consent grants, that abuse OAuth request links in an attempt to trick recipients into granting attacker-owned apps permissions to access sensitive data. This blog offers a look into the...

Logic Flaw Vulnerability in 51Cloud Real-Time Cloud Rendering Platform

Beijing Five One Vision Digital Twin Technology Co., Ltd 51WORLD is a digital twin platform company. 51cloud real-time cloud rendering platform exists there is a logic flaw vulnerability, attackers can use the vulnerability to overstep the right to modify the account permissions, access to...

PT-2021-7552

Name of the Vulnerable Software and Affected Versions Hulk-AL00C version 9.1.1.201C00E201R8P1 Jennifer-AN00C version 10.1.1.171C00E170R6P3 Jenny-AL10B version 10.1.0.228C00E220R5P1 OxfordPL-AN10B version 10.1.0.116C00E110R2P1 Description The issue is related to a logic error in the software of...

Adobe Bridge out-of-bounds write vulnerability (CNVD-2021-74116)

Adobe Bridge, a free digital asset management application from Adobe, is vulnerable to an out-of-bounds write vulnerability in Adobe Bridge 11.0.2 and earlier versions. An attacker could exploit the vulnerability to execute arbitrary code...

Adobe Bridge Improper Input Validation Vulnerability

Adobe Bridge is a free digital asset management application from Adobe. An improper input validation vulnerability exists in Adobe Bridge 11.0.2 and earlier versions. An attacker can exploit the vulnerability to disclose arbitrary memory information in the context of the current user...

Security Advisory - Logic Error Vulnerability in Several Smartphones

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Vulnerability ID:...

Mind the Gap: Securely Embracing the Digital Explosion

State and local governments are weathering a digital explosion. The move to "virtual everything" means that greater amounts of information are being produced and transmitted electronically, but the digital infrastructure powering these operations is straining under the weight. This shift is...

Mind the Gap: Securely Embracing the Digital Explosion

State and local governments are weathering a digital explosion. The move to "virtual everything" means that greater amounts of information are being produced and transmitted electronically, but the digital infrastructure powering these operations is straining under the weight...

Unauthorized Access Vulnerability in Midland Public Health's Mobile Follow-Up Visits

Chongqing Zhonglian Information Industry Co., Ltd. is one of the largest private high-tech enterprises specializing in the research, development and promotion of medical informatization products, and one of the largest providers of comprehensive solutions for digital hospitals in China. An...

Western Digital WD My

The vulnerability of the microprogrammed software in Western Digital WD My Book Live and WD My Book Live Duo storage devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Western Digital WD My Book Live Duo Command Execution

The vulnerability of the microprogrammed software for Western Digital WD My Book Live and WD My Book Live Duo exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute...

Microsoft to acquire RiskIQ to strengthen cybersecurity of digital transformation and hybrid work

Organizations are increasingly using the cloud to reimagine every facet of their business. Hybrid work has accelerated this digital transformation, and customers are challenged with the increasing sophistication and frequency of cyberattacks. Today, Microsoft is announcing that we have entered in...

Microsoft to acquire RiskIQ to strengthen cybersecurity of digital transformation and hybrid work

Organizations are increasingly using the cloud to reimagine every facet of their business. Hybrid work has accelerated this digital transformation, and customers are challenged with the increasing sophistication and frequency of cyberattacks. Today, Microsoft is announcing that we have entered in...