Logic flaw vulnerability in jspgou (CNVD-2021-42036)

Jiangxi Jinlei Technology Development Co., Ltd referred to as Jinlei Technology was founded in 2003, Jinlei Technology is a focus on java WEB application software research and development of high-tech enterprises. jspgou there is a logic flaw vulnerability, an attacker can use the vulnerability t...

CHYUI 授权问题漏洞

The Chiyu CHIYU BF-430 is a networking server that provides communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu of Taiwan, China. A security vulnerability exists in various CHIYU products, which stems from the fact that the remote login...

Arbitrary File Download Vulnerability in Tianrongxin Technology Group Reporter

Founded on August 30, 1985, Skyrun Technology Group is a leading provider of network security, big data and security cloud services in China. An arbitrary file download vulnerability exists in Tianrongxin Technology Group Reporter, which can be exploited by attackers to obtain sensitive informati...

CHIYU IoT Telnet Authentication Bypass

Exploit Title: CHIYU IoT Devices - 'Telnet' Authentication Bypass Date: 01/06/2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, BF-450M, and SEMAC - all firmware...

Logic Flaw Vulnerability in NetMizer Log Management System of Beijing Lingzhou Network Technology Co.

NetMizer Log Management System is a system that records all session logs flowing through the device and transmits them to an external management center. A logic flaw vulnerability exists in the NetMizer Log Management System of Beijing LingZhou Network Technology Co. Ltd, which can be exploited b...

Logic flaw vulnerability in jspgou

Jiangxi Jinlei Technology Development Co., Ltd referred to as Jinlei Technology was founded in 2003, Jinlei Technology is a focus on java WEB application software research and development of high-tech enterprises. jspgou there is a logic flaw vulnerability, an attacker can use the vulnerability t...

CHIYU IoT Devices - 'Telnet' Authentication Bypass

Exploit Title: CHIYU IoT Devices - 'Telnet' Authentication Bypass Date: 01/06/2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, BF-450M, and SEMAC - all firmware...

Is It Time to Consider Replacing Your CDN?

Content delivery networks CDNs are the pipelines of the Internet. Working behind the scenes, they are reshaping how information is consumed online, accelerating web traffic, enhancing user experience, and providing every website with the ability to truly go global. As you may imagine, any...

odix and Microsoft: Protecting users against malware attacks with free FileWall license

This blog post is part of the Microsoft Intelligent Security Association MISA guest blog series. Learn more about MISA. The fight against malware has become the epic battle of our generation, placing businesses of all sizes against a never-ending stream of hackers and zero-day attacks bent on...

Cybercriminals Hold $115,000-Prize Contest to Find New Cryptocurrency Hacks

A top Russian-language underground forum has been running a "contest" for the past month, calling on its community to submit "unorthodox" ways to conduct cryptocurrency attacks. The forum's administrator, in an announcement made on April 20, 2021, invited members to submit papers that assess the...

Command Execution Vulnerability in Videoconferencing Management System of Zhejiang Dahua Technology Co.(CNVD-2021-41013)

Video Conference Management System is a video cloud conferencing service software developed specifically for small and medium-sized businesses. A command execution vulnerability exists in the Video Conference Management System of Zhejiang Dahua Technology Co. Ltd, which can be exploited by an...

Unauthorized Access Vulnerability in Background Management System of Beijing Original Pioneer Network Technology Development Co.

Beijing Original Pioneer Network Technology Development Co., Ltd. is a website network technology service provider. There is an unauthorized access vulnerability in the background management system of Beijing Original Pioneer Network Technology Development Co., Ltd. that can be exploited by an...

Weak Password Vulnerability in Shengxinta Internet Behavior Management

Shenzhen Xinta Technology Co., Ltd. is a security technology company that specializes in product development. Shengxinta Internet Behavior Management has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in ESearch of Shanghai Panmicro Network Technology Co.

Ltd. is a company focusing on the field of collaborative management software to help organizations build a unified digital office platform. Ltd. ESearch suffers from an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

Meizu 16s pro has an information leak vulnerability

Meizu 16s pro is a smartphone from Zhuhai Meizu Technology Co. Meizu 16s pro suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Terminal Security System of Beijing Falcon Security Technology Co.

Terminal Security System V9.0 is a terminal security management platform specially designed for the government, military industry, energy, education, medical care and grouped enterprises. There is a file uploading vulnerability in the Terminal Security System of Beijing Falcon Security Technology...

Command Execution Vulnerability in BHW L7 Home Gateway

BHW L7 Home Gateway is a home gateway from Beijing BHW Technology Co. A command execution vulnerability exists in the BHW L7 Home Gateway, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in S-CMS Enterprise Website Builder System (CNVD-2021-41053)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a file upload vulnerability in S-CMS, which can be exploited by an attacker to gain control of the server...

S-CMS enterprise website building system suffers from SQL injection vulnerability (CNVD-2021-41048)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website builder system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

Command Execution Vulnerability in Shengxinta Internet Behavior Management

Shenzhen Xinta Technology Co., Ltd. is a security technology company that specializes in product development. A command execution vulnerability exists in Shengxinta Internet Behavior Management, which can be exploited by an attacker to gain control of a server...