SQL Injection Vulnerability in University Human Resource Management Platform of Nanjing Kuchi Information Technology Co.

Founded in 2009 with a registered capital of 10 million RMB, Nanjing Kuchi Information Technology Co., Ltd. is a software enterprise and high-tech enterprise focusing on human resource informatization management in colleges and universities in China. There is a SQL injection vulnerability in the...

File Upload Vulnerability in AIC Smart Campus System of Hainan Wings Wisdom Information Technology Co.

Hainan Wings Wisdom Information Technology Co., Ltd hereinafter referred to as "Wings Wisdom" was founded in May 2017, with a registered capital of 10 million yuan, is an enterprise specializing in consulting, planning, construction and services in the field of information technology in higher...

SQL Injection Vulnerability in Maramara App

Maramara is an App of Congtou Beijing Information Technology Co., Ltd, which was launched in March 2015. It is a sports and healthy life APP integrating marathon race registration, leisure sports, participatory sports ticketing, GPS sports track, sports community and equipment purchase. The...

Wenzhou Yitian Information Technology Co., Ltd. Yitian Intelligent eHR Management Platform Exists Arbitrary File Upload Vulnerability

Wenzhou E-Ten Information Technology Co., Ltd. is mainly engaged in E-Ten human resource management software, is a high-tech company dedicated to the development of human resource management software products. Wenzhou E-Trend Information Technology Co., Ltd E-Trend Intelligent eHR Management...

SQL Injection Vulnerability in Kuaipu-M6 Integration Management Platform System of Xiamen Crypto Information Technology Company Limited (CNVD-2021-09667)

Kuaipu-M6 integrated management platform system is a small and medium-sized enterprise integrated management and business application software developed by Xiamen Kuaipu Information Technology Co., Ltd. which has accumulated nearly 15 years of IT operation history and IT management consulting...

Weak Password Vulnerability in Mingguo Security Gateway of Hangzhou Anheng Information Technology Co.

MingGuard Security Gateway builds a next-generation security protection system with full-process defense and integrates traditional firewall, intrusion detection, intrusion prevention system, anti-virus gateway, Internet behavior control, VPN gateway, threat intelligence, and other security modul...

New cybersecurity legislation to amend the Health Information Technology for Economic and Clinical Health (HITECH) Act – an analysis of H.R. 7898

New legislation was passed by Congress and signed by the president on January 5, 2021 that amends the HITECH Act with an additional section titled: SEC. 13412. RECOGNITION OF SECURITY PRACTICES. The fundamental driver for amending HITECH is to ensure the secretary of Health and Human Services HHS...

SQL Injection Vulnerability in Taicang Suyi Information Technology Co.

The business scope of Taicang Suyi Information Technology Co., Ltd. includes: network engineering, webpage production, computer network technology development, software and hardware development, electronic technology research and development, graphic design and production. There is a SQL injectio...

Directory Traversal Vulnerability in EQ Enterprise Management System of Guangzhou EQ Information Technology Co.

Guangzhou YiQuan Information Technology Co., Ltd. is an Internet SAAS provider specializing in online management software for small and medium-sized enterprises. A directory traversal vulnerability exists in the EQ Enterprise Management System of Guangzhou YiQuan Information Technology Co. An...

Guangzhou Redfan Technology Co., Ltd. ioffice exists file upload vulnerability

Redfan Technology is mainly committed to the government, enterprises, ships, medical and other industries information technology services, to assist customers to optimize the management process, innovative management model, to enhance the overall management efficiency and competitiveness. Guangzh...

File Upload Vulnerability in Multiple Platforms of Nanjing Kuchi Information Technology Co.

Nanjing Kuchi Information Technology Co., Ltd. is a high-tech enterprise integrating R&D, sales and service. A file upload vulnerability exists in several platforms of Nanjing Kuchi Information Technology Co. Attackers can utilize the vulnerability to upload webshell and gain server privileges...

Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack

The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft, as the unfolding investigation into the hacking spree reveals the incident may have been far more wider in scope, sophistication, and impact than previously thought. News of...

Treck TCP/IP Stack (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely Vendor: Treck Inc. Equipment: TCP/IP Vulnerability : Heap-based Buffer Overflow, Out-of-bounds Read, Out-of-bounds Write The Treck TCP/IP stack may be known by other names such as Kasago TCP/IP, ELMIC, Net+ OS, Quadnet, GHNET v2,...

SQL Injection Vulnerability in Jiangsu Lianbang Information Technology Co.

Jiangsu Lianbang Information Technology Co., Ltd. is a high-tech enterprise integrating Internet and mobile Internet system research and development, smart city, traditional e-commerce transformation and digital media development. Jiangsu Lianbang Information Technology Co., Ltd. station building...

AWS, Cisco, and CompTIA Exam Prep — Get 22 Courses for $4.50 Each

You don't need a college degree to get a well-paid job in IT. But technical recruiters do expect to see key certifications on your résumé. If you would like to improve your chances of getting hired, "The 2021 All-In-One AWS, Cisco& CompTIA Super Certification Bundle" is worth your attention. This...

AMNESIA:33. (BSA-2020-1167)

Security Advisory ID: BSA-2020-1167 Component: Open source TCP/IP stacks. Revision: 1.1 Forescout Research Labs discovered 33 vulnerabilities impacting millions of IoT, OT, and IT devices that present an immediate risk for organizations worldwide.These vulnerabilities are named AMNESIA:33. Detail...

SQL Injection Vulnerability in Shanghai Junshang Information Technology Co.

Shanghai Junshang Information Technology Co., Ltd. is committed to providing all kinds of enterprises with website construction, advertising design, software development, network cabling and other professional services. There is a SQL injection vulnerability in Shanghai Junshang Information...

SQL Injection Vulnerability in Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion and so on. Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Jindao Information Technology (Shanghai) Co., Ltd T - SITE Enterprise Intelligent Website Building System has Arbitrary File Download Vulnerability

Jindao Information Technology Shanghai Co., Ltd Jindao for short, Jindao since its inception, focusing on digital marketing technology, products, services, resources, innovation and integration, has now formed the world's leading SaaS Intelligent Marketing Cloud Platform www.71360.com, the...

Hubei Taoma Qianwei Information Technology Co., Ltd. gold micro cell phone mall exists arbitrary file upload vulnerability

The business scope of Hubei Tao code thousand dimensional information science and technology limited company includes: computer software design, development, sales, technical services; system integration, application software development and so on. Ltd. Jinwei cell phone mall there are arbitrary...