SQL Injection Vulnerability in Various Smart Management Platforms of Byzoro Networks

Beijing Byzoro Networks Technology Co., Ltd hereinafter referred to as Byzoro Networks is a high-tech enterprise dedicated to building the next-generation secure Internet. A number of Smart management platforms of Byzoro Networks have SQL injection vulnerabilities, which can be exploited by...

SQL Injection Vulnerability in Guangzhou Tutron interlib Library Cluster Management System

interlib library cluster management system is a new generation of literature and information management software, using B/S mode, open multi-layer structure system, based on the Internet to realize the combination of traditional business management and massive digital resource management. There i...

SQL injection vulnerability in website building system of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a marketing plan, providing medium and high-end website design, graphic design, program development and network marketing and with Suzhou Topps Network Technology Co. Suzhou Ernst Network Technology Co., Ltd. building system there are SQL injection...

MyBook Users Urged to Unplug Devices from Internet

Hard drive giant Western Digital is urging users of its MyBook Live brand of network storage drives to disconnect them from the Internet, warning that malicious hackers are remotely wiping the drives using a critical flaw that can be triggered by anyone who knows the Internet address of an affect...

Directory Traversal Vulnerability in Xiamen Phoenix Chuangyi Software Ltd.'s Chuangyi 100VR Visualization Intelligent Interactive Teaching Cloud Platform

The business scope of Xiamen Phoenix Chuangyi Software Co., Ltd. includes: software development; Internet information services; book publishing; newspaper publishing, and so on. Xiamen Phoenix Chuangyi Software Co., Ltd Chuangyi 100VR visualization intelligent interactive teaching cloud platform...

Logic Flaw Vulnerability in Renzihang Network Security Management System of Renzihang Network Technology Co.

hereinafter referred to as Renzihang was founded in May 2000, and is committed to escorting the network information security of state management organizations, operators, enterprises and institutions, and individuals. A logic flaw vulnerability exists in the Renzi Network Security Management Syst...

Inconsistent Interpretation of HTTP Requests in github.com/gin-gonic/gin

When gin is exposed directly to the internet, a client's IP can be spoofed by setting the X-Forwarded-For header. This affects all versions of package github.com/gin-gonic/gin under 1.7.7...

[SECURITY] Fedora 34 Update: tor-0.4.5.9-1.fc34

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than makin g a direct connection, thus allowing both organizations and...

Arbitrary File Read Vulnerability in NBR6210-E

NBR6210-E is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. The NBR6210-E suffers from an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary system files...

Security Bulletin: IBM MQ Internet Pass-Thru is vulnerable to an issue within IBM® Runtime Environment Java™ Technology Edition, Version 7. (CVE-2020-14782, CVE-2020-14781)

Summary Multiple issues were identified within the IBM® Runtime Environment Java™ Technology Edition, Version 7 used by IBM MQ Internet Pass-Thru. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an...

CVE-2020-15732

Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security HSTS checks. This issue affects: Bitdefender Total Security versions prior to 25.0.7.29. Bitdefender...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44275)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44279)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44277)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Command Execution Vulnerability in DCME-520 of Beijing Digital China Yunko Information Technology Co.

DCME-520 is a new-generation high-performance Internet egress gateway launched by Digital China Networks Co., Ltd. using a multi-core high-performance processor, combined with a dedicated ASIC switching chip, to meet the business needs of large-capacity number of users, multi-traffic flow, and...

Bitdefender 多款产品信任管理问题漏洞

Bitdefender Antivirus Plus is a suite of antivirus software that provides network threat detection and ransomware protection.Bitdefender Internet Security is a suite of antivirus software that focuses on Internet security. Bitdefender Antivirus Plus is a suite of antivirus programs that provides...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44276)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

RIOT Buffer Overflow Vulnerability (CNVD-2021-44278)

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. RIOT suffers from a buffer overflow vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

HTTP/3 and QUIC: Past, Present, and Future

You may have seen the announcements over the past two weeks -- the IETF QUIC RFCs have been published! That leads to a lot of questions, depending on how closely you've followed this space. You might be wondering what this means to you, or you might think QUIC has been an established thing for...

Logic Vulnerabilities in the New Business Warfare Sandbox System of Xindao Technology Co.

New Way Technology Co., Ltd. is an enterprise management software and enterprise Internet service provider. A logic vulnerability exists in the Xindao New Business Warfare Sandbox system of Xindao Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...