Information leakage vulnerability in the smart payment platform of Guilin Jiapeng Information Technology Co. Ltd (CNVD-2021-39022)

Guilin Jiapeng Information Technology Co., Ltd. specializes in school fee system development. There is an information leakage vulnerability in Guilin Jiapeng Information Technology Limited smart fee payment platform. Attackers can use the vulnerability to obtain sensitive information...

Weak password vulnerability in the security access platform of Shenzhen Wheaton Information Technology Co.

Shenzhen Wheaton Information Technology Co., Ltd Wheaton for short is a company dedicated to providing government, enterprises and institutions with remote application centralized access solutions, VPN security interconnection solutions, core data security protection solutions and so on. There is...

SQL Injection Vulnerability in Guangzhou Good Intelligence Information Technology Co.

Guangzhou Good Intelligence Information Technology Co., Ltd. business scope: software development; information system integration services; information technology consulting services; data processing and storage services; computer technology development. Guangzhou Good Intelligence Information...

SQL Injection Vulnerability in Cross-border E-commerce Order System of Hualei Information Technology Co.

Founded in 2013, Hualei Information Technology Co., Ltd. is a professional information technology service provider. A SQL injection vulnerability exists in the cross-border e-commerce order system of Hualei Information Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

Information leakage vulnerability in the nursing performance management system of Hangzhou Yunzai Information Technology Co.

The Nursing Performance Management System establishes a scientific personnel management model, an education and training model, a performance appraisal model, and a hierarchical management model to guide the scientific allocation of hospital human resources. There is an information leakage...

Command Execution Vulnerability in WeCenter of Anhui Simplify Information Technology Co.

WeCenter is an open source program for building knowledge communities. Anhui Simplify Information Technology Co., Ltd WeCenter has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in WeCenter of Anhui Simplify Information Technology Co. Ltd (CNVD-2021-33411)

WeCenter is an open source program for building knowledge communities. Anhui Simplify Information Technology Co., Ltd WeCenter has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in Everlab-Catalog Distributor Management Backend of Beijing Kubaza Information Technology Co.

Beijing Cobazaar Information Technology Co., Ltd. is a high-tech enterprise specializing in network software development and services. Beijing Cobazaar Information Technology Co., Ltd. has a file upload vulnerability in its Everlab-Catalog reseller management backend that can be exploited by an...

FBI-DHS-CISA Joint Advisory on Russian Foreign Intelligence Service Cyber Operations

The Federal Bureau of Investigation FBI, Department of Homeland Security, and CISA have released a Joint Cybersecurity Advisory CSA addressing Russian Foreign Intelligence Service SVR cyber actors—also known as Advanced Persistent Threat 29 APT 29, the Dukes, CozyBear, and Yttrium—continued...

File Upload Vulnerability in OfficeWeb365 of Xi'an Daxi Information Technology Co.

OfficeWeb365 focuses on Office document online preview and PDF document online preview cloud services, including Microsoft Word document online preview, Excel table online preview, Powerpoint presentation document online preview, WPS word processing, WPS forms, WPS presentations and Adobe PDF...

SQL Injection Vulnerability in Tanaosoft Towel Textile ERP System

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. A SQL injection vulnerability exists in the Tanaosoft Towel Textile ERP system, which ca...

SQL Injection Vulnerability in Production Management Software System of Jiangsu Hans Future Information Technology Co.

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. There is a SQL injection vulnerability in the production management software system of...

Command Execution Vulnerability in Netnifty Security Gateway

Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. which was formerly known as Lenovo Group's Information Security Division. A command execution vulnerability exists in the Netnifty Security Gateway, which can be exploited by attackers ...

Anhui Xufan Information Technology Co., Ltd. EASYGBS exists logic flaw vulnerability

Anhui Xufan Information Technology Co., Ltd. was established on August 11, 2014 . Legal representative Cai Kunsong, the company's scope of business includes: computer hardware and software development and sales, technical services, technical consulting, technology transfer; web page design; netwo...

Code Execution Vulnerability in CMS Content Management System of Chengdu JINWEI TECHNOLOGY Co.

Chengdu today network technology limited company scope of business: computer hardware and software development; computer hardware and software technology services, computer information technology consulting services; computer network engineering construction, etc.. Code execution vulnerability...

File Upload Vulnerability in WoSmith Customer Service System

Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. There is a file upload vulnerability in WoSmith's customer service system, which can be exploited by attackers to gain control of the server...

Unauthorized Access Vulnerability in ThinkApe Systems

Scope ®️ belongs to Shanghai Yingce Information Technology Co. It is a financial shared service solution provider in China. An unauthorized access vulnerability exists in the ThinkApe system, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in the Website Building System of Shanghai Cai Sheng Information Technology Co.

Shanghai Cai Sheng Information Technology Co., Ltd abbreviated as: "Cai Sheng Planning" was founded in 2005, is a digital marketing as the core of the integrated marketing services company. There is a SQL injection vulnerability in the website building system of Shanghai CaiSheng Information...

Weak Password Vulnerability in DKEY Access Manager

Shanghai Ningdun Information Technology Co., Ltd. was registered on April 7, 2009 in Xuhui District Market Supervision Administration. Legal representative Liu Yingge, the company's scope of business includes computer software, hardware in the field of technology development, technical consulting...

Catalog Traversal Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Information Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...