Marlink Sky File 路径遍历漏洞

Marlink Sky File is a product of Marlink, Inc. that is used to quickly transfer files to mobile devices. A path traversal vulnerability exists in Marlink Sky File version v2.1.0, which stems from the software's lack of effective filtering and restriction of path information submitted with the nul...

skyaccountants.com.au Improper Access Control vulnerability OBB-2164516

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OpenSNS SQL blind injection vulnerability (CNVD-2021-101547)

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL blind injection vulnerability exists in the pid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

OpenSNS SQL Blind Betting Vulnerability

OpenSNS is a comprehensive social software developed by Thinking Sky. A SQL blind injection vulnerability exists in the cid parameter in /Controller/ChinaCityController.class.php in OpenSNS version 6.1.0. An attacker can exploit this vulnerability to obtain sensitive database information...

Logic Flaw Vulnerability in Tengyi Sky Firewall v2

TengYi Network is an Internet service provider specializing in providing domestic and international anti-attack protection. A logic flaw vulnerability exists in Tengyi Sky Firewall v2, which can be exploited by attackers to obtain sensitive information...

WordPress Recently plugin <= 3.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Yu Iwama of Secure Sky Technology Inc. and the JPCERT/CC Vulnerability Coordination Group in WordPress Recently plugin versions = 3.0.4. Solution Update the WordPress Recently plugin to the latest available version at least...

Unauthorized Access Vulnerability in ZTE Sky Smart Gateway

ZTE Corporation is a leading global provider of integrated communications solutions. An unauthorized access vulnerability exists in the ZTE Sky Smart Gateway. An attacker could exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in the Website Building System of Haikou ECCOM Sky Information Technology Company Limited (CNVD-2021-41234)

hereinafter referred to as "ECCOM Sky" is a collection of website construction, website planning, website optimization, search engine optimization and a variety of office software development, program development in one of the high-speed and healthy development of network information technology...

SQL Injection Vulnerability in Lansing Sky Human Resource Management System

Ltd. is a focus on human resources management software research, development and solutions for high-tech enterprises. Lanxin Tianji human resources management system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

The Malwarebytes 2021 State of Malware report: Lock and Code S02E04

This week on Lock and Code, we discuss the top security headlines generated right here on Labs. In addition, we tune in to a special presentation from Adam Kujawa about the 2021 State of Malware report, which analyzed the top cybercrime goals of 2020 amidst the global pandemic. If you just pay...

CEO of Encrypted Chat Platform Indicted for Aiding Organised Criminals

The U.S. Department of Justice DoJ on Friday announced an indictment against Jean-Francois Eap, the CEO of encrypted messaging company Sky Global, and an associate for wilfully participating in a criminal enterprise to help international drug traffickers avoid law enforcement. Eap also known as...

Europol Credits Sweeping Arrests to Cracked Sky ECC Comms

Europol launched “major interventions” against organized crime on March 9, which it said were made possible by monitoring the encrypted messages of around 70,000 users of the Sky ECC service since mid-February. Sky ECC, which focuses on selling mobile phones with specialized, private...

Police credit “unlocked” SKY ECC encryption for organized crime bust

At the moment, I’m really torn, and I need your help. Let me tell you what is going on. I read these statements and they can’t both be true, right? “The continuous monitoring of the illegal Sky ECC communication service tool by investigators in three countries has provided invaluable insights int...

Denial of Service Vulnerability in EPON Sky Gateway

Tianyi Gateway is a hardware terminal of "Optical Cat Smart Router". A denial of service vulnerability exists in the EPON Sky Gateway, which can be exploited by an attacker to reboot the device multiple times...

sky-international.com Improper Access Control vulnerability OBB-1356034

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

SQL injection vulnerability in Pr***.asp page of website building system of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

SQL injection vulnerability in Co***.asp page of website building system of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

SQL Injection Vulnerability in Website Building System of Liaocheng City Sky Network Technology Co.

Ltd. provides one-stop online marketing planning, training, website construction, website production, website optimization, Baidu optimization, site optimization, keyword ranking, promotion, operation, SEO optimization and other e-commerce solutions, is committed to serving the vast number of sma...

Command Execution Vulnerability in Blue Sky Collector of Nanchang Zhuolan Technology Co.

Blue Sky Collector is a free data collection and publishing crawler software, developed by php+mysql, which can be deployed in cloud servers, and can collect almost all types of web pages, seamlessly connecting to all kinds of CMS station building programs, and releasing data in real time without...

SQL Injection Vulnerability in Blue Sky Escort Equipment Management System of Nanjing Huiwei Da Information Technology Co.

Blue Sky Escort Device Management System is a device management system based on thinkphp3.x secondary development. Nanjing Huimida Information Technology Co., Ltd. blue sky escort equipment management system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive...