SQL Injection Vulnerability in E-Trend Intelligent eHR Management Platform (CNVD-2021-24430)

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. E-Trend Intelligent eHR Management Platform has SQL injection vulnerabilities, which ca...

SQL Injection Vulnerability in Enterprise Standardized Management System of R&S Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a company that deals with technology development in the field of information technology, cloud computing, and Internet of Things IoT technology. There is a SQL injection vulnerability in the Enterprise Standardized Management System of R&S...

SQL Injection Vulnerability in Enterprise Standardization Management System of Runshen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a company that operates in the field of information technology, cloud computing, Internet of Things technology, such as technology development. There is a SQL injection vulnerability in the enterprise standardization management system of R&S...

File Containment Vulnerability in Hangzhou New CUHK Netcallserver Management Console

Founded in 1993, Hangzhou Xinzhongda Technology Co., Ltd. is a professional information technology solution provider in the fields of project management, intelligent construction, financial and tax management, and government finance management. A file inclusion vulnerability exists in the Hangzho...

Zhengzhou Wolong website builder system has SQL injection vulnerability

Zhengzhou Wolong Software Development Co., Ltd, was registered in Henan Province on 2013-03-11, belongs to the information transmission, software and information technology services industry, the main industry is software and information technology services industry, the service field is computer...

Weak password vulnerability in SECCN G20 VPN of Guangzhou Dingcheng Information Technology Company Limited (CNVD-2021-22989)

Guangzhou Dingcheng Information Technology Co., Ltd DCT is one of the earliest high-tech enterprises engaged in the research and development of information security products in China. Ltd. SECCN G20 VPN has a weak password vulnerability that can be exploited by attackers to obtain sensitive...

Information leakage vulnerability in the omni-channel customer service system of Foshan Beame Information Technology Co.

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an information leakage vulnerability in the omni-channel customer service system of Foshan Beamy Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

SSRF Vulnerability in Omni-Channel Customer Service System of Foshan Beamy Information Technology Co.

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. Ltd. omni-channel customer service system exists SSRF vulnerability, attackers can use the vulnerability to read arbitrary files...

Everything You Need to Know About Evolving Threat of Ransomware

The cybersecurity world is constantly evolving to new forms of threats and vulnerabilities. But ransomware proves to be a different animal—most destructive, persistent, notoriously challenging to prevent, and is showing no signs of slowing down. Falling victim to a ransomware attack can cause...

Arbitrary File Download Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.

AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co., Ltd. suffers from an arbitrary file download vulnerability, which can be exploited by an attacker to read or download arbitrary...

Binary Vulnerability in VisualField VF***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A binary vulnerability exists in the VisualField VF.exe component of Zhejiang ZDAC Information Technology Co. Ltd. that can be exploited by an attacker to cause a...

File Upload Vulnerability in VisualField SC***.exe Component at Zhejiang ZDZ Information Technology Co.

VisualField VF for short system software is a software package for control system configuration and monitoring for the ECS-700 system. A file upload vulnerability exists in the VisualField SC.exe component of Zhejiang ZDAC Information Technology Co. Ltd, which can be exploited by an attacker to...

Shenzhen Zero-One Information Technology Co., Ltd. website building system SQL injection vulnerability

Shenzhen Zero-One Information Technology Co., Ltd. is a business intelligence solution provider integrating consulting, professional services and product marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zero One Information Technology Co. Attackers can...

Jinan Yuxia Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-16393)

Jinan Yuxia Information Technology Co., Ltd. to the Internet products and related services as the main direction, is a collection of website construction and network promotion, IDC business, software development, server hosting, telecommunications value-added services and other integrated service...

Beijing Yilong Information Technology Co., Ltd Yilong Travel Network has a Logic Flaw Vulnerability

Yilong.com Information Technology Beijing Co., Ltd. is an enterprise that operates, researches, develops and produces computer hardware and software. Ltd. eLong Travel Network has a logic flaw vulnerability that can be exploited by attackers to cause arbitrary user registrations and reset arbitra...

File Upload Vulnerability in Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Co.

Ticketmaster ERP Management System is a specialized ticket management system for airline ticketing agents. A file upload vulnerability exists in the Ticketmaster ERP Management System of Shanghai Shengdai Information Technology Company Limited, which can be exploited by an attacker to gain contro...

Hefei Mingjing Information Technology Co., Ltd. JTopCMS background exists arbitrary file deletion vulnerability

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS background arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete any file on the server...

SQL injection vulnerability in JTopCMS Ma***.jsp page of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Ltd. JTopCMS Ma.jsp page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

XSS Vulnerability in JTopCMS of Hefei Mingjing Information Technology Co.

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as user cookies...

Hefei Mingjing Information Technology Co., Ltd. JTopCMS background there are arbitrary file download vulnerabilities

JTopCMS is based on the JavaEE standard , used to manage site content of the open source web management system . Hefei Mingjing Information Technology Co., Ltd. JTopCMS background arbitrary file download vulnerability, attackers can use the vulnerability to download configuration files and so on...