SQL Injection Vulnerability in Schoolfree Psychological Assessment System (CNVD-2021-23551)

School Worry Free Psychological Assessment System is a platform that enables online mental health testing and diagnosis through the Internet. SQL injection vulnerability exists in School Worry-free Psychological Assessment System, which can be exploited by attackers to obtain sensitive informatio...

Weak password vulnerability in TOTOLINK smart routers

TOTOLINK is a brand of mid-to-high-end wireless routing in the Asia Pacific region, with a market share of 82.3% in Korea. A weak password vulnerability exists in TOTOLINK smart routers, which can be exploited by attackers to obtain sensitive information...

Vulnerabilities fixed in F5 BIG-IQ

F5 has fixed vulnerabilities in BIG-IQ. A malicious person at remote can exploit the vulnerabilities to perform a Cross-Site Scripting XSS attack. Such an attack can lead to the execution of arbitrary script code in the browser used to visit the application being visited. In addition, a malicious...

Weak Password Vulnerability in Flying FishStar Next-Generation Firewall Security Gateway

Chengdu Flying Fish Star Technology Co., Ltd. is a value-added service that serves enterprise, business and home users with intelligent and easy-to-use network communication management devices and innovative technologies. A weak password vulnerability exists in the security gateway of Flyingfish...

Weak Password Vulnerability in TopVPN 6000 by Skyrunner

Skyrise Technology Group Skyrise is a provider of network security, big data and security cloud services. A weak password vulnerability exists in Tianrongxin TopVPN6000. Attackers utilize the vulnerability to log into the backend and obtain sensitive information...

Microsoft SharePoint Server Information Disclosure Vulnerability (CNVD-2021-25708)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An information...

Weak Password Vulnerability in Qixing Tianqing Hanma USG Firewall

Tianqing HANMAR USG Firewall is developed based on Qixing ISE unified engine, there is no OEM from third-party functions, and the functions can be split in any combination, which has very little impact on the system performance. There is a weak password vulnerability in Qisda Tianqing Hanma USG...

CVE-2021-21190

Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

Weak Password Vulnerability in RG-UAC Devices of Riptide Networks

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A weak password vulnerability exists in the RG-UAC device of Ruijie...

SQL Injection Vulnerability in Runge Marking System of Chengdu Runge Unlimited Technology Co.

Chengdu R&G Unlimited Technology Co., Ltd. was founded on June 07, 2013, the company was mainly engaged in cross-platform 3D game engine research and development at the beginning of the company's business, after nearly a few years of technological precipitation of the company is currently engaged...

Weak Password Vulnerability in Atech Network Management System (CNVD-2021-23505)

Ltd. is a small and medium-sized network solution provider and service provider in China. A weak password vulnerability exists in the Atech Network Management System, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Ruoyi Management System

Ruoyi management system is based on SpringBoot2.0 permissions management system, the core technology using SpringBoot, MyBatis, Shiro, Thymeleaf, Bootstrap, Vue and so on. The system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information fr...

SQL Injection Vulnerability in Intelligent Internet of Things System of Nanjing Jiuzhe Software Technology Co.

JiuZe Technology is a mobile Internet customized software service provider, providing enterprise customers with one-stop mobile Internet solutions from product planning, conceptual design to software delivery, operation and promotion. SQL injection vulnerability exists in the intelligent Internet...

SQL Injection Vulnerability in T1 of Shipment 100 Virtual Goods Autoship System (CNVD-2021-21567)

Shipment 100-Virtual Goods Auto Shipment System is a powerful virtual goods automatic shipment system/article pay to read the system, without human guards, customers can buy online to automatically complete the transaction. It supports out-of-stock reminders/quick login/recycling bin/no-login...

Arbitrary File Read Vulnerability in SPAdmin

SPAdmin is a backend management system can be quickly developed , integrated with rich third-party APP , the core technology SpringBoot, JPA, Shiro. SPAdmin has an arbitrary file read vulnerability, attackers can use this vulnerability to obtain sensitive information...

Weak Password Vulnerability in FW1000 Series Firewalls of Hangzhou Dipu Technology Co.

Hangzhou Dipu Technology Co., Ltd "Dipu Technology" is a high-tech listed enterprise integrating R&D, production and sales. A weak password vulnerability exists in the FW1000 series firewall of Hangzhou Dipu Technology Co. An attacker can use this vulnerability to log into the backend and obtain...

Advantech Spectre RT ERT351 Cross-Site Scripting Vulnerability

The Advantech Spectre RT ERT351 is a router from Advantech USA providing network routing capabilities. The Advantech Spectre RT ERT351 error response handling suffers from a cross-site scripting vulnerability that allows remote attackers to exploit the vulnerability to inject malicious script or...

Weak Password Vulnerability in TP-LINK Archer C5

Archer C5 is a wireless router product. A weak password vulnerability exists in TP-LINK Archer C5. An attacker can exploit the vulnerability to log into the system backend and obtain sensitive information...

SQL Injection Vulnerability in the Home Furnishing ERP Management System of Shanghai Furnishing Alliance Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...

SQL Injection Vulnerability in Home Furnishing ERP Management System of Shanghai Furnishing Union Information Technology Co.

Home furnishing ERP management system can make the company's pre-sale and after-sale customer resource management more standard, standardized, humanized, maximize the exploitation of customer service value, enhance the company's maximum customer service value. There is a SQL injection vulnerabili...