CVE-2021-38406

CVE-2021-38406 affects Delta Electronics DOPSoft 2 (versions ≤ 2.00.07). It is caused by improper validation of user-supplied data when parsing specific project files, leading to multiple out-of-bounds write instances and potential code execution in the attacker’s context. The issue is documented...

The vulnerability of the electronic examination system TCExam arises from the lack of measures taken to protect the structure of the web page. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the electronic examination system TCExam exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information through a specially...

What is Eavesdropping Attack❓ Definition, Types and Prevention

Eavesdropping can be defined as the demonstration of quietly catching a discussion among arbitrary outsiders; albeit discourteous, what mischief might it actually do? All things considered, very little in case somebody is simply honestly paying attention to a discussion that intrigues them...

CVE-2021-39375

Philips Healthcare Tasy Electronic Medical Record EMR 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter...

CVE-2021-39375

Philips Healthcare Tasy Electronic Medical Record EMR 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter...

CVE-2021-39376

Philips Healthcare Tasy Electronic Medical Record EMR 3.06 allows SQL injection via the CorCadF2/executaConsultaEspecifico IECORPOASSIST or CDUSUARIOCONVENIO parameter...

Philips Healthcare Tasy Electronic Medical Record SQL注入漏洞

Philips Healthcare Tasy Electronic Medical Record EMR is a comprehensive healthcare informatics solution that addresses all areas of the healthcare environment, connecting the dots between clinical and non-clinical areas of the healthcare continuum. philips Healthcare Tasy Electronic Medical Reco...

Command Execution Vulnerability in DIR-846 at AUO Electronic Devices (Shanghai) Co.

The DIR-846 router is a wireless router product for users with gaming and video entertainment needs. A command execution vulnerability exists in the AUO Electronic Devices Shanghai Co. DIR-846, which can be exploited by an attacker to execute arbitrary code...

New Glowworm Attack Recovers Device's Sound from Its LED Power Indicator

A novel technique leverages optical emanations from a device's power indicator LED to recover sounds from connected peripherals and spy on electronic conversations from a distance of as much as 35 meters. Dubbed the "Glowworm attack," the findings were published by a group of academics from the...

Cyberbullying 101: A Primer for kids, teens, and parents

At some point in our lives, we have likely either been bullied, stood back and watched others bullying, or participated in the act. Playing the role of offender, offended, and by-stander has become easier, thanks to the Internet and the technologies that make it possible to keep up connected. In...

NSA Watchdog Will Review Tucker Carlson Spy Claims

The National Security Agency’s Inspector General Robert Storch has announced a review of whether the agency illegally conducted cyber-espionage and collected the electronic communications of Fox News opinion-show host Tucker Carlson, who has accused the NSA of trying to capture embarrassing...

‘Glowworm’ Attack Turns Light Flickers into Audio

Virtual meetings are vulnerable to a new, exotic attack called Glowworm, which measures an audio output device’s LED power light changes and converts them to audio reproductions — allowing cyberattackers to listen to sensitive conversations. As an increasing amount of business is being conducted...

LNCToken has an unspecified vulnerability

LNCToken is an electronic currency, and there is a security vulnerability in LNCToken that could be exploited by an attacker to cause unexpected financial loss during a transaction...

LNCToken 输入验证错误漏洞

LNCToken is an electronic currency, and there is a security vulnerability in LNCToken that could be exploited by an attacker to cause unexpected financial loss during a transaction...

Unauthorized Access Vulnerability in Ovia's Instructional Video Application Cloud Platform

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. Guangzhou Aoweiya Electronic Technology Co., Ltd. campus video application cloud platform has unauthorized access vulnerability, attackers can use the...

Arbitrary File Deletion Vulnerability in OpenEMR

OpenEMR is the open source electronic health record and medical practice management solution. OpenEMR suffers from an arbitrary file deletion vulnerability that can be exploited by an attacker to delete arbitrary files...

SQL Injection Vulnerability in Dynamic Ring Monitoring Backend System of Guangzhou Kingston Electronic Technology Company Limited (CNVD-2021-54063)

Guangzhou Kingston Electronic Technology Co., Ltd. is a high-tech company integrating R&D, production and sales, and is the leading developer and manufacturer of networked computer room power environment monitoring equipment in China. Guangzhou Kingston Electronic Technology Co., Ltd. dynamic rin...

Weak Password Vulnerability in Intelligent Firefighting Cloud Platform of Suzhou State Grid Electronic Technology Co.

GNT is an IoT+ management solution provider. A weak password vulnerability exists in the Intelligent Firefighting Cloud Platform of Suzhou Guonet Electronic Technology Co. Ltd. where an attacker utilizes a weak password to log into the backend and obtain sensitive information...

Akamai Helps Q-dance Bring Its Tribe to Defqon.1 at Home -- a Global Virtual Festival Experience

Every year, Q-dance part of the ID&T group, a Dutch electronic music experience company, delights its die-hard fans or their "tribe" at the world's largest hardstyle festival, Defqon.1. Helicopters, simulated earthquakes, special moments like Power Hour, and amazing shows make up the unique...

SQL Injection Vulnerability in the Joint Exam Version of Xi'an Runge Electronic Technology Co.

The business scope of Xi'an Runge Electronic Technology Co., Ltd. includes: sales of electronic products, computer software and hardware; computer software, electronic products and so on. Xi'an Runge Electronic Technology Co., Ltd. marking cloud platform joint examination version of the SQL...