Xionghai CMS login end exists universal password login vulnerability

Xionghai CMS is a personal blog, personal website, enterprise website a set of integrated website management system. A universal password login vulnerability exists on the login side of Xionghai CMS, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability at Network Device Logins at Riptide Networks, Inc.

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products and storage. A weak password vulnerability exists in the network equipment login of...

CVE-2020-26085

CVE-2020-26085 and related Cisco Jabber vulnerabilities affect Cisco Jabber Desktop and Mobile Client (Windows, macOS, and mobile). The connected sources describe multiple flaws that could allow an attacker to execute arbitrary code or access sensitive information on the underlying OS, with netwo...

SQL injection vulnerability in SeaCMS backend (CNVD-2021-03455)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. Attackers can use the vulnerability to obtain sensitive information in the database...

SQL Injection Vulnerability in Tongda OA2017

Tongda OA 2017 is office integration office system. Tongda OA2017 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Wyse ThinOS Insecure Default Configuration Vulnerability (CNVD-2021-02362)

Wyse ThinOS is a highly secure, virus-resistant thin operating system. An insecure default configuration vulnerability exists in Wyse ThinOS 8.6 and earlier versions. An attacker could exploit the vulnerability to access sensitive information on the local network...

Login Bypass Vulnerability in Charging Pile Operation Management System of Shenzhen Crestec Technology Co.

Shenzhen Crestec Technology Co., Ltd. is a technology enterprise engaged in the research, development, manufacturing and sales of UPS uninterruptible power supply, server room integration, maintenance-free lead-acid batteries, inverter power supply. A login bypass vulnerability exists in the...

SQL Injection Vulnerability in online-book-store-project-in-php

online-book-store-project-in-php is an online bookstore project , using php, mysql, bootstrap to create a simple online Web store , with a complete graphical interface , which allows users to simply and conveniently select the items to buy . A SQL injection vulnerability exists in...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01866)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01865)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Arbitrary File Download Vulnerability in MTCEO Repository System

MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system exists arbitrary file download vulnerability, attackers can use the vulnerability to obtain sensitive information...

Logic Flaw Vulnerability in Unified Identity Service Platform ZFIAM

The scope of business of Ortho Software Co., Ltd. includes: technology development, technical services, results transfer: computer software, computer network system integration, etc. The unified identity authentication service platform ZFIAM has a logic flaw vulnerability, which can be exploited ...

SQL Injection Vulnerability in the Website Building System of Spiegel Fargo Network Security Information Technology Company Limited (CNVD-2021-01311)

Spiegel Fargo Network Security Information Technology Co., Ltd. was established on 11/09/2007. Legal representative Xu Binglian, the company's scope of business includes: computer network technology development, promotion; network security technology services and consulting. There is a SQL...

Dbhcms Has Arbitrary File Read Vulnerability

Dbhcms is a small PHP open source content management system for personal and small business websites. Dbhcms has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2020-75024)

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A SQL injection vulnerability exists in the DSS Safe Ci...

Catalog Traversal Vulnerability in KTO's Fully Intelligent Parking Video Charging System

Xiamen KTO Communication Technology Co., Ltd. is an enterprise dedicated to developing and providing intelligent parking lot application solutions, and its business includes all-video intelligent parking lot solutions, diversified parking lot parking space guidance solutions and so on. A director...

SQL Injection Vulnerability in Kingdee Collaboration Office Platform (CNVD-2020-75008)

Kingdee Software China Co., Ltd. business scope includes: production, development, operation of computer hardware and software, technical training and information consulting services. A SQL injection vulnerability exists in the Kingdee Collaborative Office Platform, which can be exploited by an...

Weak password vulnerability in enterprise-class wireless APs from multiple vendors

An enterprise-class wireless AP is a network device. A weak password vulnerability exists in enterprise-class wireless APs from multiple vendors. An attacker can exploit the vulnerability to gain access to sensitive information by logging in with a weak password...

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Ltd. was established in March 2001 in Qingdao, long-term service in the information technology and electronic industry at the forefront of high-tech positions, specializing in e-commerce, website production and maintenance and database development. There is a SQL injection vulnerability in Qingda...

CVE-2020-27133

CVE-2020-27133 is a Cisco Jabber Desktop and Mobile Client vulnerability family affecting Cisco Jabber for Windows, MacOS, and mobile platforms. The CVE entries arise from multiple issues in message handling and input validation: CVE-2020-26085 (XMPP message handling leading to remote code execut...