Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System

Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...

File upload vulnerability in Speedcat ERP backend management system

Ltd. is an e-commerce management product specially developed for cross border e-commerce platforms such as Selling, Amazon and Ebay. There is a file upload vulnerability in the Quickcat ERP backend management system, which can be exploited by attackers to control the server by uploading Trojan...

Patch now! Apple fixes in-the-wild iPhone vulnerabilities

Apple has fixed two vulnerabilities in Safaris WebKit component, announcing it is aware of a report that they may have been actively exploited. Both vulnerabilities could be abused by maliciously crafted web content that could lead to arbitrary code execution: In other words, the bugs let rogue...

Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild

Apple on Monday shipped out-of-band security patches to address two zero-day vulnerabilities in iOS 12.5.3 that it says are being actively exploited in the wild. The latest update, iOS 12.5.4, comes with fixes for three security bugs, including a memory corruption issue in ASN.1 decoder...

Unauthorized Access Vulnerability in AXIS P3344 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P3344 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M3114 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M3114 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS P1353 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P1353 Network Camera, which can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in Schneider Electric EcoStruxure Control Expert (CNVD-2021-45385)

Schneider Electric EcoStruxure Control Expert is a suite of programming software for Schneider Electric logic controller products. A denial of service vulnerability exists in Schneider Electric EcoStruxure Control Expert, which can be exploited by an attacker to cause the program to crash...

Unauthorized Access Vulnerability in AXIS M7014 Video Encoder

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M7014 Video Encoder, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M1103 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M1103 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS 211W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 211W Network Camera, which can be exploited by attackers to obtain sensitive information...

CVE-2021-0489

creationtimestamp| type| source ---|---|--- 2021-06-11 20:21:01+00:00| exploited| Telegram/0ErPWNJ2hsNVJrl3YsSuPJ2ZmHthdFqIxfXDSUt8xDZuTg...

Code injection

E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code...

CVE-2021-28805 Inclusion of Sensitive Information in QSS

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

New Chrome 0-Day Bug Under Active Attacks – Update Your Browser ASAP!

Attention readers, if you are using Google Chrome browser on your Windows, Mac, or Linux computers, you need to update it immediately to the latest version Google released earlier today. The internet services company has rolled out an urgent update to the browser to address 14 newly discovered...

CVE-2020-12359

creationtimestamp| type| source ---|---|--- 2021-06-10 02:58:20+00:00| exploited| Telegram/6OPUWYP6Xw3r-HG5oXkj69p0s-TG6H6NW7RPOzozjXRRSk...

CVE-2020-12360

creationtimestamp| type| source ---|---|--- 2021-06-10 02:58:17+00:00| exploited| Telegram/PLEFJiU20fPqO9EOZxbpOHPihaUhDWrGKQPA5URVPSV8g...

Weak Password Vulnerability in Hysine Webtalk System

Hysine is the world's leading manufacturer of BACnet control systems. A weak password vulnerability exists in the Hysine Webtalk system, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Bee.com Internet's Enterprise Flow Control Cloud Router

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. A weak password vulnerability exists in the BeeNet Interconnect Enterprise Flow Control Cloud Router , which can be exploit...

SUSE: Security Advisory (SUSE-SU-2014:1213-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...