Denial of Service Vulnerability in VisualField VF***.exe Component at Zhejiang ZDAC Information Technology Co.

VisualField VF for short is a software package for control system configuration and monitoring for the ECS-700 system. A denial of service vulnerability exists in the VisualField VF.exe component of Zhejiang ZDZC Information Technology Co. An attacker can exploit the vulnerability to cause the...

Podcast: Learning to ‘Speak the Language’ of OT Security Teams

Andrew Ginter, VP Industrial Security at Waterfall Security Solutions. Information technology IT and operational technology OT may have many of the same objectives – but too often they don’t see eye-to-eye when it comes to top priorities, said Andrew Ginter, VP Industrial Security at Waterfall...

SQL injection vulnerability in l***.php page of website building system of Inner Mongolia Wando Information Technology Co.

Wando Technology is an information technology company dedicated to enterprise informatization application services, in order to actively promote the development of enterprise informatization and e-commerce, because of the transparency, so the integrity of the enterprise policy. It is an applicati...

SQL injection vulnerability in Shanghai Zhihu Information Technology website construction page ca***_de***.

Shanghai Zhihu Information Technology Co., Ltd. precipitated 5 years, each industry comprehensive business scenarios, combined with the ability of technological innovation, to provide social e-commerce, home furnishing industry, tourism and travel and other areas of the solution. Shanghai Zhihu...

Denial-of-service vulnerability exists in KingbaseES of Beijing NPC Kingcang Information Technology Co., Ltd (CNVD-2020-48684)

KingbaseES is a new database product for transaction processing and analytical applications. A denial of service vulnerability exists in KingbaseES, which can be exploited by attackers to cause a denial of service...

Denial of Service Vulnerability in KingbaseES of Beijing NPC Kingcang Information Technology Co.

KingbaseES V8R3 is a new database product for transaction processing and analytical applications. A denial of service vulnerability exists in KingbaseES, which can be exploited by attackers to cause a denial of service...

Logic Flaw Vulnerability in the Great Practice Series Teaching Management System of Kok Jin Information Technology Ltd.

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A logic flaw exists in the GJIT Large Practice Series Teaching Management System, which can be exploited by an attacker to reset any user's password...

Yixing Xingsheng Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Yixing Xing Sheng Information Technology Co., Ltd. is a collection of network interactive media, planning, consulting, film and television, in one of the new network interactive service providers. Yixing Xing Sheng Information Technology Co., Ltd. station building system SQL injection...

Command Execution Vulnerability in AmarBCR of Shanghai Anshuo Information Technology Co.

AmarBCR is a big data correlation risk monitoring system developed by Shanghai Anshuo Information Technology Co. AmarBCR of Shanghai Anshuo Information Technology Co. Ltd. suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands...

SQL injection vulnerability in ro***.php page of Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion, full network marketing, large-scale mall and platform construction, micro letter development, mobile client development, office OA and other services. Jinan Guanan...

SQL Injection Vulnerability in SIP EOMP System of Guiyang SIP Information Technology Co.

Guiyang SIP Information Technology Co., Ltd. was founded in 2002, since its inception has been focusing on providing management consulting, management informatization and enterprise business management data services to enterprise users. A SQL injection vulnerability exists in Guiyang SIP...

Jeesite has an XSS vulnerability

JeeSite is an enterprise information technology development infrastructure platform , Java enterprise applications open source framework. Jeesite has an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

SQL Injection Vulnerability in Jeesite of Jinan Zhuoyuan Software Co.

JeeSite is an enterprise information technology development infrastructure platform. Jeesite by Jinan Zhuoyuan Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the database...

Arbitrary File Deletion Vulnerability in MetInfo of Changsha Mito Information Technology Co.

MetInfo is mainly used to build enterprise websites, using PHP+MySQL architecture, supporting SQLite database and so on. Changsha Mito Information Technology Co., Ltd MetInfo has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files from the websi...

SQL Injection Vulnerability in Jinan Ganan Information Technology Co.

Ltd. is a high-tech company engaged in Internet services, mainly for enterprises to provide website construction, website promotion and so on. Ltd. has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

New HC3 report defines security assessments needed for healthcare organizations during and after COVID-19

The Health Sector Cybersecurity Coordination Center HC3 recently delivered a report that defines and articulates the security assessments and information technology audits that should be considered during and after the COVID-19 pandemic...

DLL Hijacking Vulnerability in Golden Ark Chart Viewer

Golden Boat Viewing King is a viewing software of Jiangxia Information Technology Huizhou Co. There is a DLL hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

EyouCMS 1.4.6 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: https://eyoucms.com Software Link:...

EyouCMS 1.4.6 Cross Site Scripting

Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting Date: 2020-05-28 Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: https://eyoucms.com Software Link: https://qiniu.eyoucms.com/EyouCMS-V1.4.6-UTF8-SP2.zip Version: EyouCMS V1.4.6...

Arbitrary File Download Vulnerability in AVCON6 System Management Platform of Huaping Information Technology Co.

Huaping Information Technology Co., Ltd. is a provider of video products and applications, mastering video processing, video and audio coding and decoding, and network adaptability. The AVCON6 system management platform of Huaping Information Technology Co., Ltd. suffers from an arbitrary file...