Unauthorized Access Vulnerability in Ovia's Instructional Video Application Cloud Platform

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. Guangzhou Aoweiya Electronic Technology Co., Ltd. campus video application cloud platform has unauthorized access vulnerability, attackers can use the...

Unauthorized Access Vulnerability in Clinical Browsing System of Bluebonnet Technologies Inc.

Bluebonnet Technology Co., Ltd. is a well-known medical information technology solution provider, focusing on the field of medical information technology, product development, sales and service as one of the national high-tech enterprises. An unauthorized access vulnerability exists in the clinic...

MuWire Information Disclosure Vulnerability

MuWire is an open source file publishing and networking tool that uses 12P technology to protect the identity of its users.A security vulnerability in the desktop client prior to MuWire version 0.8.8 could be exploited by an attacker to send a message with a subject line containing a URL tagged...

Arbitrary File Download Vulnerability in Taibo Cloud Platform of Xiamen Taibo Technology Co.

TabTech Ltd. is a software company focusing on the informationization of senior universities. Xiamen Taibo Technology Co., Ltd. Taibo Cloud Platform has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Unspecified vulnerability in DEPSTECH WiFi Digital Microscope (CNVD-2021-60544)

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that could be exploited by attackers to gain access to sensitive information...

File Upload Vulnerability in Multimedia Information Distribution System of Shenzhen Inge Intelligent Technology Co.

Shenzhen Inge Intelligent Technology Co., Ltd, general business items are: research and development, sales and leasing of computer software and hardware; Internet and Internet of Things technology development, technology consulting, technical services and so on. Shenzhen Inge Intelligent Technolo...

SQL Injection Vulnerability in Tongda OA Version 11.10 Server Side

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Unspecified vulnerability in DEPSTECH WiFi Digital Microscope

DEPSTECH WiFi Digital Microscope is a wifi industrial endoscope from Shenzhen Shenhai Innovation Technology Co., Ltd. in China. DEPSTECH WiFi Digital Microscope 3 has a security vulnerability that allows remote attackers to change the SSID and password and demand a ransom from the legitimate devi...

CVE-2021-32750

MuWire is a file publishing and networking tool that protects the identity of its users by using I2P technology. Users of MuWire desktop client prior to version 0.8.8 can be de-anonymized by an attacker who knows their full ID. An attacker could send a message with a subject line containing a URL...

Zero Trust: Not As Scary As It Sounds

If the term Zero Trust has been popping up in your news feed with astonishing frequency lately, you may be tempted to think that Zero Trust must be a brand-new technology cooked up in a research lab at MIT and powered by the latest artificial intelligence, machine learning, quantum computing, and...

File Upload Vulnerability in Kaytone Applet

Guangzhou KaiSoft Information Technology Co., Ltd. is a collection of enterprise management software development, sales, service, IT operation and maintenance services, online rental services in one of the IT solutions provider. A file upload vulnerability exists in the KaySoft applet, which can ...

Stored XSS Vulnerability in the Smart Gateway Configuration Platform of Beijing Bibi Technology Co.

Ltd. is a company with professional Wi-Fi technology, which is committed to combining Internet technology with traditional industries to help industry customers embrace the Internet and create new value for traditional industries. There is a stored XSS vulnerability in the Smart Gateway...

SQL Injection Vulnerability in the Website Building System of Jereh Information Business Limited

Jereh Information Business Limited is a company that has completed thousands of corporate websites, e-commerce websites, event websites, as well as a variety of function-specific programs and apps for thousands of companies and organizations. A SQL injection vulnerability exists in the website...

Unauthorized Access Vulnerability in Psychometric Flat of Anhui Yangguangxinjian Science and Technology Development Co.

Anhui Yangguangxinjian Science and Technology Development Co., Ltd. is an organization specializing in the service of applied psychology, and the enterprise has its own production base of psychological equipment and psychological equipment, and it is a domestic brand psychological...

SQL Injection Vulnerability in Hubei Dapeng Network Technology Co.

Hubei Dapeng Network Technology Co., Ltd. is a network technology company mainly focusing on website construction, network promotion, 400 telephone, public number development, small program construction, WeChat marketing, software system, network engineering and so on. Hubei Roc Network Technolog...

Weak Password Vulnerability in Network Video Server of Shenzhen Longchamp Xintron Technology Co. Ltd (CNVD-2021-54075)

Ltd. is a leading provider of intelligent inspection robots and intelligent infrared thermal imaging products and solutions in China. Ltd. Network Video Server has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in Clinical Case Database System of Chongqing Yuanqiu Technology Co.

The Clinical Case Database System is a database system used to extract to form a complete original medical record that is used for case reference. A SQL injection vulnerability exists in the clinical case database system of Chongqing Yuanqiu Technology Co. Ltd, which can be exploited by attackers...

Arrests of members of Tetrade seed groups Grandoreiro and Melcoz

Spains Ministry of the Interior has announced the arrest of 16 individuals connected to the Grandoreiro and Melcoz also known as Mekotio cybercrime groups. Both are originally from Brazil and form part of the Tetrade umbrella, operating for a few years now in Latin America and Western Europe...

Location-and Device-agnostic Security for the Mobile Workforce

I've spent my entire career in technology and can still recall the time when a desktop PC was the only way to work. Truth be told, I'm also old enough to remember dumb terminals. I also remember my first company laptop -- a beast of a thing with a monochrome display so thick it came with an...

Logic Flaw Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd.

Siltronic is committed to the cause of disaster reduction and profitability, providing the government with comprehensive solutions for disaster reduction and profitability informatization; providing enterprises with information and application services for disaster reduction and profitability; an...