FBI-DHS-CISA Joint Advisory on Russian Foreign Intelligence Service Cyber Operations

The Federal Bureau of Investigation FBI, Department of Homeland Security, and CISA have released a Joint Cybersecurity Advisory CSA addressing Russian Foreign Intelligence Service SVR cyber actors—also known as Advanced Persistent Threat 29 APT 29, the Dukes, CozyBear, and Yttrium—continued...

Arbitrary File Deletion Vulnerability in Vermont Cloud at Shanghai Vermont Software Co.

Ltd. is a foreign trade SaaS service provider, but also a professional foreign trade industry solutions provider. Ltd. VUMA Cloud suffers from an arbitrary file deletion vulnerability. An attacker can exploit this vulnerability to delete arbitrary information...

Threat Advisory: NSA SVR Advisory Coverage

The U.S. National Security Agency released an advisory outlining several vulnerabilities that the Russian Foreign Intelligence Services SVR is exploiting in the wild. The U.S. formally attributed the recent SolarWinds supply chain attack to the SVR group in this advisory and detailed more of the...

SemCms suffers from SQL injection vulnerability (CNVD-2021-29093)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SemCms suffers from SQL injection vulnerability (CNVD-2021-29092)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SemCms suffers from SQL injection vulnerability (CNVD-2021-29089)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

SemCms suffers from a logic flaw vulnerability (CNVD-2021-29094)

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms has a logic flaw vulnerability that can be exploited by attackers to affect the integrity of the system...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28838)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28831)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28832)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28839)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28828)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28833)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28463)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system, mainly for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SEMCMS PHP multilingual version of the existence of SQL injection vulnerability, attackers c...

SQL Injection Vulnerability in SEMCMS PHP (Multilingual) Version (CNVD-2021-28464)

SEMCMS PHP multilingual version is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SEMCMS PHP multilingual version of the SQL injection vulnerability, an attacker can use t...

XSS Vulnerability in SemCms Frontend

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. SemCms front-end XSS vulnerability , attackers can exploit the vulnerability to obtain sensitive information such as user cookies...

Wenzhou Orange Tree Network Technology Co., Ltd. website building system has file upload vulnerability

Wenzhou Orange Tree Network Technology Co., Ltd. is a foreign trade marketing consulting services company, focusing on search engine keyword advertising, search engine optimization SEO technology, search engine marketing SEM consulting and optimized for the search engine website construction...

Wenzhou Orange Tree Network Technology Co., Ltd. station building system has unauthorized access vulnerabilities

Wenzhou Orange Tree Network Technology Co., Ltd. is a foreign trade marketing consulting services company, focusing on search engine keyword advertising, search engine optimization SEO technology, search engine marketing SEM consulting and optimized for the search engine website construction...

Linux: special config may crash when trying to map foreign pages

ISSUE DESCRIPTION With CONFIGXENBALLOONMEMORYHOTPLUG disabled and CONFIGXENUNPOPULATEDALLOC enabled the Linux kernel will use guest physical addresses allocated via the ZONEDEVICE functionality for mapping foreign guest's pages. This will result in problems, as the p2m list will only cover the...

CVE-2021-21308

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2...