Arbitrary File Read Vulnerability in EAA Application Access System of Shaanxi Yihe Information Technology Development Co.

EAA Application Access System is a virtual application management platform that provides virtual application access based on the VA Enterprise Engine. Ltd. EAA Application Access System suffers from an arbitrary file read vulnerability, which can be exploited by an attacker to obtain sensitive...

SQL Injection Vulnerability in Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd. is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. station building system SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...

SQL Injection Vulnerability in Shanghai TengYan Information Technology Co.

The main business of Shanghai TengYan Information Technology Co., Ltd. is to provide customers with IT solutions and IT outsourcing services. Shanghai TengYan Information Technology Co., Ltd. has a SQL injection vulnerability in its website building system, which can be exploited by attackers to...

Logic flaw vulnerability in human capital management platform of P&L Software Co.

P&T Software is a large-scale enterprise management informatization solutions and IT integrated service provider, mainly for petroleum, chemical, construction, real estate, electric power, minerals, equipment manufacturing, banking, insurance, government and other industries, widely engaged in...

SQL Injection Vulnerability in Jeecg-Boot v2.1.4 at Beijing Guo Torch Information Technology Co.

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Beijing Guo Torch Information Technology Co. Jeecg-Boot v2.1.4 suffers from a SQL injection vulnerability, which can...

XSS Vulnerability in Shanghai Fenghu Chain Information Technology Co.

It is a digital integral ecological alliance operation platform jointly initiated by Xin.com E-commerce Group, CCB International and UnionPay Business, and co-invested by Bank of China, China Mobile, and China Eastern Airlines. Shanghai Fenghu Chain Information Technology Co., Ltd. has an XSS...

Arbitrary File Read Vulnerability in TRS WAS at TORS Information Technology Inc.

TORS Information Technology Co. is a provider of artificial intelligence and big data technology and data services. An arbitrary file read vulnerability exists in the TRS WAS of TORS Information Technology Co. that can be exploited by an attacker to obtain sensitive information...

WARNING: Hackers Install Secret Backdoor on Thousands of Microsoft SQL Servers

Cybersecurity researchers today uncovered a sustained malicious campaign dating back to May 2018 that targets Windows machines running MS-SQL servers to deploy backdoors and other kinds of malware, including multi-functional remote access tools RATs and cryptominers. Named "Vollgar " after the...

Micro Focus Service Manager Automation SQL Injection Vulnerability

Micro Focus Service Manager is a suite of service desk software from Micro Focus UK. The software supports the deployment of a comprehensive IT service management ITSM system and standardizes management processes. A SQL injection vulnerability exists in Micro Focus SMA. The vulnerability stems fr...

NTP-5D7FF32 Denial of Service Vulnerability in Shandong Fisherman Information Technology Co.

NTP-5D7FF32 is an NTP time server from Shandong Fisherman Information Technology Co. NTP-5D7FF32 of Shandong Fisherman Information Technology Co. Ltd. suffers from a denial-of-service vulnerability that can be exploited by an attacker to prevent the device from functioning properly...

Micro Focus Service Manager Information Disclosure Vulnerability (CNVD-2020-18400)

Micro Focus Service Manager is a suite of service desk software from Micro Focus UK. The software supports the deployment of a comprehensive IT service management ITSM system and standardizes management processes. A security vulnerability exists in Micro Focus Service manager. An attacker could...

Hubei Tao code thousand dimensional information technology limited company gold micro cell phone mall system file upload vulnerability

Jinwei mobile mall system is suitable for micro-business customers with public number, imitating the page layout of the hand Tao, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory...

Hubei Tao code thousand dimensional information technology limited company gold micro cell phone mall system exists arbitrary file modification vulnerability

Jinwei mobile mall system is suitable for micro-business customers with public number, imitating the page layout of the hand Tao, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory...

XSS Vulnerability in Yunye CMS

Yunye CMS is developed by Yunye Information Technology is a specialized for small and medium-sized enterprise website construction of php open source CMS. Yunye CMS has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

Nantong Home Information Technology Co., Ltd. website building system suffers from SQL injection vulnerability

Nantong Home Information Technology Co., Ltd. is a company that provides online platform services. Nantong Home Information Technology Co., Ltd. building system there is SQL injection, attackers can use the vulnerability to obtain sensitive information server...

SQL Injection Vulnerability in Shanghai Silverfox Information Technology Co.

Shanghai Silver Fox Information Technology Co., Ltd Silver Fox Power is a high-tech company dedicated to enterprise information technology services. Shanghai Silverfox Information Technology Co., Ltd. station building system has a generic SQL injection vulnerability, attackers can use the...

SQL Injection Vulnerability in Website Building System of Jinhua Jishi Information Technology Co.

Ltd. was founded in 2012, is the only designated service operator of Baidu in Jinhua area. We are committed to providing localized and convenient services for Baidu customers, helping enterprises to get more orders and enhance brand awareness through Baidu promotion. A SQL injection vulnerability...

Dongguan Yuteng Information Technology Co., Ltd. website building system SQL injection vulnerability

Dongguan Yuteng Information Technology Co., Ltd abbreviation: Yuteng Software is a company specializing in software development, network services and system integration in the field of supply chain and logistics freight forwarding services. There is a SQL injection vulnerability in Dongguan Yuten...

Vulnerabilities in the Employment Information Network System of Beijing Rongzhi Chuangxiang Information Technology Co.

Beijing Rongzhi Chuangxiang Information Technology Co., Ltd, is a company engaged in Internet software development. An override access vulnerability exists in the Employment Information Network system, which can be exploited by attackers to obtain sensitive information...

New Group of Hackers Targeting Businesses with Financially Motivated Cyber Attacks

Security researchers have tracked down activities of a new group of financially-motivated hackers that are targeting several businesses and organizations in Germany, Italy, and the United States in an attempt to infect them with backdoor, banking Trojan, or ransomware malware. Though the new...