There is a file uploading vulnerability in Jiangsu Wave Information Consulting Company Limited's state-owned capital supervision informatization platform

Jiangsu Wave Information Consulting Co., Ltd. is an ERP senior industry consultants, deep technical background and industry experience, innovation, "integrity management, adhering to the advanced, deep technology" as the goal of the IT company. Jiangsu Wave Information Consulting Co., Ltd...

Phish-Friendly Domain Registry “.top” Put on Notice

The Chinese company in charge of handing out domain names ending in ".top" has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its license to sell domains. The warning comes amid the release of...

changzhou.jiangsu.net Cross Site Scripting vulnerability OBB-3804232

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

yangzhou.jiangsu.net Cross Site Scripting vulnerability OBB-3781531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Chinese Hackers Using MgBot Malware to Target International NGOs in Mainland China

The advanced persistent threat APT group referred to as Evasive Panda has been observed targeting an international non-governmental organization NGO in Mainland China with malware delivered via update channels of legitimate applications like Tencent QQ. The attack chains are designed to distribut...

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack. "Underpinning this campaign was the use of transfer.sh," Cado Security said in a report shared with The...

There is an information leakage vulnerability in the online office service hall of Jiangsu Jinzhi Education Information Co.

Jiangsu Jinzhi Education Information Co., Ltd Jinzhi Education, founded in 2008, is a leading provider of higher education informatization services in China. An information leakage vulnerability exists in the online office service hall of Jiangsu Jinzhi Education Information Company Limited, whic...

File Upload Vulnerability in the Supervisory Platform of Zhongke Nintu Technology Jiangsu Co.

Nanjing Nintu Information Technology Co., Ltd now renamed as Zhongke Nintu Technology Jiangsu Co., Ltd was founded in August 2009, is a software development and service-oriented enterprise with the technical background of gis laboratory of Hohai University. Its product supervision platform is...

Logic flaw vulnerability in the lock group management system of Jiangsu Esso Electronic Technology Co.(CNVD-2021-45710)

Ltd. is specialized in substation video monitoring system, passive intelligent lock group management system development, power intelligent auxiliary monitoring system, distribution room monitoring system, intelligent access control system, production and sales of high-tech enterprises. Ltd. lock...

Logic Vulnerabilities in the Lock Group Management System of Jiangsu Esso Electronic Technology Co.

Ltd. is specialized in substation video monitoring system, passive intelligent lock group management system development, power intelligent auxiliary monitoring system, distribution room monitoring system, intelligent access control system, production and sales of high-tech enterprises. Ltd. lock...

SQL Injection Vulnerability in PV Power Plant Monitoring System of Jiangsu Goodway Power Technology Co.

Jiangsu Goodway Power Supply Technology Co., Ltd. is a new energy high-tech enterprise. A SQL injection vulnerability exists in the monitoring system of the photovoltaic power plant of Jiangsu Goodway Power Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information fr...

Unauthorized Access Vulnerability in Video Fusion Gateway of Jiangsu Huaiye Information Technology Co.

Jiangsu Huaiye Huaiye is an original manufacturer with two independent core technologies of video cloud switching and wireless broadband private network communication. An unauthorized access vulnerability exists in the Video Convergence Gateway of Jiangsu Huaiye Information Technology Company...

Logic flaws exist in the lock group management system of Jiangsu Esso Electronic Technology Co.

Ltd. is specialized in substation video monitoring system, passive intelligent lock group management system development, power intelligent auxiliary monitoring system, distribution room monitoring system, intelligent access control system, production and sales of high-tech enterprises. Ltd. lock...

Logic flaws exist in the lock group management system of Jiangsu Esso Electronic Technology Co.

Ltd. is a high-tech enterprise specializing in the development, production and sales of passive intelligent locks and intelligent lock group management system. There is a logic flaw vulnerability in the Lock Group Management System of Jiangsu Esso Electronics Technology Co. An attacker could...

Jiangsu Sanxi Technology Co., Ltd. pollution source online monitoring management system has information leakage vulnerability

Ltd. is a professional provider of software and hardware total solutions in the field of environmental automatic monitoring and industrial process control. Ltd. pollution source online monitoring management system information leakage vulnerability, attackers can use the vulnerability to obtain...

Unauthorized access vulnerability in the website building system of Jiangsu Wolye Software Co.

Jiangsu Wo Ye Software Co., Ltd. focuses on auditing, housing construction, transportation, municipal, high-speed rail, safety supervision, water conservancy, farmland renovation, river lake long system, major projects, investment promotion, big visit, archives, Zanxue.com, the seven-color sheep...

SQL Injection Vulnerability in Jiangsu Wo Ye Software Co.

Jiangsu Wo Ye Software Co., Ltd. focuses on auditing, housing construction, transportation, municipal, seven-color sheep and office automation and other engineering projects throughout the process of management of big data information platform development, engaged in intelligent government cloud...

SQL Injection Vulnerability in Production Management Software System of Jiangsu Hans Future Information Technology Co.

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. There is a SQL injection vulnerability in the production management software system of...

SQL Injection Vulnerability in Tanaosoft Towel Textile ERP System

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. A SQL injection vulnerability exists in the Tanaosoft Towel Textile ERP system, which ca...

Unauthorized Access Vulnerability in Coal Mine Comprehensive Informatization Control Platform of Jiangsu Sanheng Technology Co.(CNVD-2021-30078)

Jiangsu Sanheng Technology Co., Ltd. is a joint-stock technology enterprise, the company's products mainly have three specialized directions: mine safety, mine communication, mine automatic control. The main systems are KJ70X coal mine safety monitoring system, KJ128A mine personnel management...