OpenEMR 跨站脚本漏洞

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A stored cross-site scripting vulnerability exists in OpenEMR versions 5.0.2 - 6.0.0. The vulnerability stems from not properly validating user input. An attacker can exploit the vulnerability to...

SQL Injection Vulnerability in Hefei Chenguang Electronic Technology Website Building System

Founded in 2004, Hefei Chenguang Electronic Technology Co., Ltd. is a well-known professional Internet operation service provider. There is a SQL injection vulnerability in Hefei Chenguang Electronic Technology's website building system, which can be exploited by an attacker to obtain sensitive...

ABB eSOMS 信息泄露漏洞

ABB eSOMS Electronic Shift Operations Management System is a plant operations management system from ABB Switzerland. An information disclosure vulnerability exists in eSOMS that could allow an unauthorized user to access report data...

Protecting Sensitive Cardholder Data in Today’s Hyper-Connected World

The payment processing system has steadily evolved over time. Greatly amplified by the COVID-19 pandemic, the use of electronic payment systems in this economy has soared nearly overnight. With online shopping at an all-time high as consumer behaviors shift toward more convenience and flexibility...

Russian Hackers Targeted Ukraine Authorities With Supply-Chain Malware Attack

Ukraine is formally pointing fingers at Russian hackers for hacking into one of its government systems and attempting to plant and distribute malicious documents that would install malware on target systems of public authorities. "The purpose of the attack was the mass contamination of informatio...

Unauthorized Access Vulnerability in Electronic Medical Record Query System of Nanjing Nalong Technology Co.

Nanjing Nalon Technology Co., Ltd. is a company dedicated to cardiac electrophysiology solutions. An unauthorized access vulnerability exists in the electronic medical record query system of Nanjing Nalong Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in DIR-878 AC1900 MU-MIMO Dual Band Gigabit Wireless Router

AUO Electronic Devices Shanghai Co., Ltd. provides high-quality network solutions for consumers and businesses of all sizes. A denial of service vulnerability exists in the DIR-878 AC1900 MU-MIMO Dual Band Gigabit Wireless Router. An attacker can exploit this vulnerability to cause a denial of...

Changzhou Zhenming Electronic Technology Internet of Things intelligent street light comprehensive management platform has logic flaws and loopholes

Changzhou Zhenming Electronic Science and Technology Co. Legal representative Yuan Chunjuan,The company's business scope includes: research and development of electronic products; technology development of new energy products; electronic products and components, metal materials, mechanical...

OpenEMR Cross-Site Request Forgery Vulnerability

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site request forgery vulnerability exists in OpenEMR 5.0.2, 6.0.0. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to execute an arbitrary request in...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co. Ltd (CNVD-2021-10391)

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co. Ltd (CNVD-2021-10392)

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co.

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co. Ltd (CNVD-2021-10393)

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

SQL Injection Vulnerability in Electronic Evidence Management Software of Shenzhen Police Wing Intelligent Technology Co. Ltd (CNVD-2021-10394)

Shenzhen Police Wings Intelligent Technology Co., Ltd. is an enterprise in China's law enforcement recorder industry, integrating R&D, manufacturing, sales and service. Shenzhen Police Wing Intelligent Technology Co., Ltd. electronic evidence management software SQL injection vulnerability,...

Denial of Service Vulnerability in DIR-878 at AUO Electronic Devices (Shanghai) Co.

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A denial of service vulnerability exists in DIR-878 of AUO Electronic Devices Shanghai Ltd. that can be exploited by attackers to cause a denial of...

Logic Flaw Vulnerability in Extreme Classroom Management System Deluxe Edition

Polaris Electronic Classroom Management System is a teaching system. A logic flaw vulnerability exists in the Deluxe Edition of the Polaris Electronic Classroom Management System, which can be exploited by attackers to execute elevated privilege system commands...

Duplicate numbering

Freyrscada IEC-60879-5-104 Server Simulator is a software from Freyrscada India for simulating communication between IEDs and RTUs over TCP. The software is written in C for all POSIX compliant operating systems and supports single server simulation with multiple workstations. "Obsolete" Do not u...

Denial of Service Vulnerability in H3C NX18 Plus

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technology services, technology consulting, results transfer, production and sales: electronic products, etc. A denial of service vulnerability exists in H3C NX18 Plus, which can be exploited by attackers t...

Tech Giants Lend WhatsApp Support in Spyware Case Against NSO Group

Facebook subsidiary WhatsApp has received new high-caliber support in its case against Israeli intelligence company NSO Group. The court case aims to hold NSO Group accountable for distributing its Pegasus spyware on the popular WhatsApp messaging service with the intent of planting its spyware o...

SQL Injection Vulnerability in the Frontend of Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system in...