597 matches found
Arbitrary File Read Vulnerability in Sky Mirror Vulnerability Scanning and Management System of Kaixingchen Information Technology Group Co.
Sky Mirror Vulnerability Scanning and Management System is a vulnerability scanning product independently developed by Qixing, a network-based vulnerability analysis, assessment and management system. Sky Mirror Vulnerability Scanning and Management System of Qixing Information Technology Group...
Command Execution Vulnerability in Sky Mirror Vulnerability Scanning and Management System of Qixing Information Technology Group Co.
Sky Mirror Vulnerability Scanning and Management System is a vulnerability scanning product independently developed by Qixing, a network-based vulnerability analysis, assessment and management system. There is a command execution vulnerability in the Sky Mirror Vulnerability Scanning and Manageme...
XSS Vulnerability in the Online Platform of Beijing MUHUA Information Technology Co.
Beijing Muhua Information Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. XSS vulnerability exists in the online platform of Beijing MUHUA Information Technology Co. Ltd.'s Academy, which can be exploited by attackers to obtain sensiti...
Unauthorized Access Vulnerability in SRM Cloud Platform of Shanghai Zhenyun Information Technology Co.
Shanghai Zhenyun Information Technology Co., Ltd. is a domestic procurement digital management platform provider. An unauthorized access vulnerability exists in the SRM cloud platform of Shanghai Zhenyun Information Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...
Zhejiang small walk information technology limited company small walk share wechat small program there are logic defects vulnerability
Small Walk Share WeChat app is a transportation platform. Zhejiang small walk information technology limited company small walk sharing wechat small program has a logic flaw vulnerability, attackers can use the vulnerability to log in any account...
The vulnerability of microprogramming software in programming and hardware environments for monitoring and security protection of IT infrastructure arises from the implementation of physical threats. This vulnerability is related to incorrect restrictions on the visible layers or frames of the user interface. This allows attackers to compromise data integrity.
The vulnerability of the microprogramming software used in IT infrastructure monitoring and security monitoring hardware devices in NetBotz 4 is related to incorrect restrictions on the layers or frames that can be visualized in the user interface. Exploiting this vulnerability could allow a...
5 Reasons Why IT Security Tools Don't Work For OT
Attacks on critical infrastructure and other OT systems are on the rise as digital transformation and OT/IT convergence continue to accelerate. Water treatment facilities, energy providers, factories, and chemical plants — the infrastructure that undergirds our daily lives could all be at risk...
How to Reduce Exposure on the Manufacturing Attack Surface
Digitalization initiatives are connecting once-isolated Operational Technology OT environments with their Information Technology IT counterparts. This digital transformation of the factory floor has accelerated the connection of machinery to digital systems and data. Computer systems for managing...
PT-2023-20848 · Sourcecodester · Sourcecodester Computer Laboratory Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester ICT Laboratory Management System version 1.0 Description: A vulnerability has been found in the SourceCodester ICT Laboratory Management System, affecting an unknown functionality of the file views/room info.php of the componen...
Adopting an Effective and Easy To Implement Zero Trust Architecture
Security professionals employed by a federal agency, supplier, or regulated private sector firm are often challenged by long lists of required cybersecurity rules that can seem endless and unchanging. White House Executive Orders, FedRAMP requirements, CISA Binding Operational Directives, NIST...
Oracle WebLogic Server vulnerability added to CISA list as “known to be exploited”
On May 1, 2023 the Cybersecurity and Infrastructure Security Agency CISA added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies are obliged to remediate the...
Command Execution Vulnerability in Tianyi Application Virtualization System of Xi'an Ruiyou Information Technology Information Co.
Skywing Application Virtualization System is a virtualization platform based on application server architecture. Xi'an Ruiyou Information Technology Information Co., Ltd Skywing Application Virtualization System has a command execution vulnerability that can be exploited by attackers to execute...
Beijing Muhua Information Technology Co., Ltd. rain classroom has a logic flaw vulnerability
Rain Classroom is an educational learning app. A logic flaw vulnerability exists in Rain Classroom of Beijing Muhua Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...
Information leakage vulnerability in Jaeger Reports of Beijing Guo Torch Information Technology Co.
Beijing Guo Torch Information Technology Co., Ltd. is an information technology company engaged in computer software research and development, application and service, providing all-round support for large and medium-sized application system engineering. An information leakage vulnerability exist...
New HiatusRAT Malware Targets Business-Grade Routers to Covertly Spy on Victims
A never-before-seen complex malware is targeting business-grade routers to covertly spy on victims in Latin America, Europe, and North America at least since July 2022. The elusive campaign, dubbed Hiatus by Lumen Black Lotus Labs, has been found to deploy two malicious binaries, a remote access...
CVE-2021-45478 IDOR in Yordam Library Automation System
Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...
Rittal CMC III PU 安全漏洞
The Rittal CMC III PU is a Supervisory Control Processing Unit from Rittal for IT, building and industrial applications. A security vulnerability exists in the CMC III, CMC compact, which can be exploited by an attacker to open a control cabinet protected with a Rittal lock...
Ransomware pushes City of Oakland into state of emergency
The ransomware attack that hit Oakland on Wednesday February 8, 2023 is still crippling many of the citys services a week later. In fact, the situation is so bad that the Interim City Administrator has now declared a state of emergency. Tweet announcing the state of emergency The ransomware attac...
A Hackers Pot of Gold: Your MSP's Data
A single ransomware attack on a New Zealand managed service provider MSP disrupted several of its clients' business operations overnight, most belonging to the healthcare sector. According to the country's privacy commissioner, "a cyber security incident involving a ransomware attack" in late...
Logic Flaw Vulnerability in Backend Management of E-House Real Estate System
Ltd. is a company whose business scope includes: Internet data services, network and information security software development, software and information technology services, software development, information technology consulting services, information processing and storage support services,...