CVE-2021-31252

The CVE-2021-31252 entry corresponds to an open redirect vulnerability in CHIYU Technology devices: BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC. According to the connected sources (NVD, CVE lists, CNNVD, PRION), the issue stems from an open redirect mechanism that can be...

Influence of technology on gaming industry

By Habiba Rashid With easy access to games and the internet, technology allowed millions around the world to enjoy gaming as a shared interest and activity. This is a post from HackRead.com Read the original post: Influence of technology on gaming industry...

Arbitrary File Read Vulnerability in Network Keyboard Console of Suzhou Kodak Technology Co.

Ltd. is a leading video and security products and solutions provider, dedicated to video conferencing, video surveillance and a wealth of video application solutions. KODAK Network Keyboard Console has an arbitrary file read vulnerability that can be exploited by an attacker to arbitrarily read...

多款Chiyu产品注入漏洞

The Chiyu CHIYU BF-430, etc. are all networking servers that provide communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu Inc. of Taiwan, China. A security vulnerability exists in CHIYU Technology Inc's BF-430, BF-431, and BF-450M TCP/IP...

File Upload Vulnerability in Smart Meter Integrated Management System of Xintian Technology Co.

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A file upload vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to gain control of the...

Command Execution Vulnerability in H3C SecPath Operations Audit System

Xinhua San Technology Co., Ltd. is a new IT solution provider, committed to become the most trusted partner for customers' business innovation and digital transformation. The main products are routers, big data, switches, IoT, cloud computing, servers and so on. A command execution vulnerability...

Information leakage vulnerability of Hangzhou Huisuo Technology Co.

Hangzhou Huisuo Technology Co., Ltd. was founded in 2010, the scope of business includes: technical services, technology development, technology consulting, technology exchanges, technology transfer, technology promotion; software development; information technology consulting services; network...

Command Execution Vulnerability in OLYM of Shenzhen Aolian Technology Co.

Shenzhen AOLINK Information Security Technology Co., Ltd "AOLINK" for short started in 2002, is a security enterprise integrating algorithm development, product research and development, solution realization, standard formulation and forward-looking technology research. OLYM has a...

Making Diversity and Inclusion a Business Imperative at Imperva

To create meaningful change, you need to be the difference you wish to see in the world. At Imperva, we’re taking meaningful action and investing to create a workplace that brings together all voices, experiences and identities. We recognize that true innovation requires diversity of thought,...

Afternoon Cyber Tea: Cybersecurity challenged to meet diversity goals

Organizations often know they need to identify and address their cybersecurity blind spots. They also know the technology exists to help them do that. However, they don’t often understand how to communicate this need within their organization to justify the expense, nor do they know how to share...

Afternoon Cyber Tea: Cybersecurity challenged to meet diversity goals

Organizations often know they need to identify and address their cybersecurity blind spots. They also know the technology exists to help them do that. However, they don’t often understand how to communicate this need within their organization to justify the expense, nor do they know how to share...

Weak Password Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group

Founded on August 30, 1985, Skyrise Technology Group, or "Skyrise" for short, is a leading provider of network security, big data and security cloud services in China. A weak password vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group, which can be...

CHIYU IoT Devices - (Telnet) Authentication Bypass Exploit

Exploit Title: CHIYU IoT Devices - 'Telnet' Authentication Bypass Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, BF-450M, and SEMAC - all firmware versions June 20...

Command Execution Vulnerability in UCM Collaborative Communication Platform of Beijing Zhongchuang Vision Technology Co. Ltd (CNVD-2021-43039)

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. A command execution vulnerability exists in the UCM collaborative communication platform of Beijing Zhongchuang Vision Technology Co., Ltd, which can be exploited by an...

CHIYU IoT Devices - Denial of Service (DoS)

Exploit Title: CHIYU IoT Devices - Denial of Service DoS Date: 01/06/2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC - all...

Weak Password Vulnerability in Solarsys Marketing Routing System of Beijing Oriental Gosun Information Technology Co.

Oriental Gosun is a leading Chinese technology company integrating hardware production and platform operation, focusing on commercial Wi-Fi and media services, developing and providing localized commercial Wi-Fi solutions. A weak password vulnerability exists in the Solarsys marketing routing...

FDCMS SQL Injection Vulnerability

FDCMS is a PHP-based content management system of Sichuan Method Digital Technology Co. A SQL injection vulnerability exists in FDCMS version 4.0. An attacker can use this vulnerability to inject malicious SQL via Admin/Lib/Action/FloginAction.class.php to obtain database records...

CHIYU IoT Denial Of Service

Exploit Title: CHIYU IoT Devices - Denial of Service DoS Date: 01/06/2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC - all...

SQL Injection Vulnerability in Cscms of Guilin Chongsheng Network Technology Co.

Cscms is a diversified content management system, the use of PHP5 MYSQL as the technical basis for development, the use of OOP object-oriented approach to the basic operation of the framework to build. Guilin Chongsheng Network Technology Co., Ltd Cscms SQL injection vulnerability, attackers can...

Logic flaw vulnerability in jspgou (CNVD-2021-42036)

Jiangxi Jinlei Technology Development Co., Ltd referred to as Jinlei Technology was founded in 2003, Jinlei Technology is a focus on java WEB application software research and development of high-tech enterprises. jspgou there is a logic flaw vulnerability, an attacker can use the vulnerability t...