SQL Injection Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Limited (CNVD-2021-24954)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A SQL injection vulnerability exists in the PHP version of SongCMS by Guangdong Kager...

SQL injection vulnerability in in***.php page of Harbin Qixun Technology Co.

Harbin Qixun Technology Co., Ltd. is an Internet enterprise specializing in small and medium-sized enterprise network marketing outsourcing. Harbin Qixun Technology Co., Ltd. building system in.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitiv...

SQL Injection Vulnerability in SongCMS PHP Version of Guangdong Kegel Technology Co.

SongCMS is a PHP MySQL, ASP Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users to quickly build and deploy enterprise-level portals. A SQL injection vulnerability exists in the PHP version of SongCMS by Guangdong Kager...

Catalog Traversal Vulnerability in HIM Basic Management Platform of Beijing Zhongchuang Vision Technology Co.

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. There is a directory traversal vulnerability in the HIM base management platform of Beijing CCTV Technology Co., Ltd. that can be exploited by an attacker to traverse any...

SQL injection vulnerability in se***.php page of Harbin Qixun Technology Co.

Harbin Qixun Technology Co., Ltd. is an Internet enterprise specializing in small and medium-sized enterprise network marketing outsourcing. Harbin Qixun Technology Co., Ltd. building system se.php page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informati...

Information Leakage Vulnerability in LAC WEB Control Center of Shanghai Huanchuang Communication Technology Co.

Huntron Communications LAC is a WiFi product. Shanghai Huanchuang Communication Technology Co., Ltd LAC WEB control center has an information leakage vulnerability, attackers can download sensitive files to obtain sensitive information...

Security Bulletin: Multiple vulnerabilities in IBM® SDK, Java™ Technology Edition affect IBM Operational Decision Manager (Oct 2020 and Jan 2021 CPUs)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7 and 8 that is used by IBM Operational Decision Manager ODM. These issues were disclosed as part of the IBM Java SDK updates in October 2020 and and in January 2021. Vulnerability Details CVEID: CVE-2020-147...

Akamai Foundation: Our Chance to Give Back

The Akamai Foundation was set up in 2018 to improve the impact and focus of our long-term philanthropic activities. Importantly, we wanted to support the next generation of technology innovators; promoting the pursuit of excellence in STEM education amongst school children. Our work had an...

Weak Password Vulnerability in GS Series Enterprise Application Gateway of Hangzhou Guanhang Technology Co.

Hangzhou Guanhang Technology Co., Ltd. is an innovative manufacturer of intelligent network solutions. Dedicated to the development and application of enterprise-class wireless network, Internet of Things IoT and smart switch products, it is a next-generation enterprise-class wireless, IoT and...

Shanghai Niomai Network Technology Co., Ltd. website building system has a universal password login vulnerability.

Shanghai Niumai Network Technology Co., Ltd. was founded on 09/09/2019. Legal representative Xu Xinsheng,The company's business scope includes: engaging in the field of network technology technology, technology development, technology transfer, technical consulting, technical services; web page...

Weak Password Vulnerability in Multiple Network Devices at Atech Technology

Atech is a small and medium-sized network solution provider and service provider in China. A weak password vulnerability exists in a number of Atech's network devices, which can be exploited by attacks to obtain sensitive information...

Weak Password Vulnerability in BHW L7 Home Gateway

BHW L7 Home Gateway is a home gateway from Beijing BHW Technology Co. A weak password vulnerability exists in BHW L7 Home Gateway. An attacker can use this vulnerability to log into the system background and obtain sensitive information...

Intel RST User Interface / Driver Privilege Escalation

Hi @ll, more than 2 years ago I disclosed 2 vulnerabilities leading to local escalation of privilege in the Intel® Rapid Storage Technology Intel® RST User Interface and Driver: see and Intel fixed this vulnerability only in their executable installer. Some time later Intel rewrote or rebuilt thi...

Weak Password Vulnerability in DKEY Access Manager

Shanghai Ningdun Information Technology Co., Ltd. was registered on April 7, 2009 in Xuhui District Market Supervision Administration. Legal representative Liu Yingge, the company's scope of business includes computer software, hardware in the field of technology development, technical consulting...

Catalog Traversal Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Information Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

Renqiu Zhengzhong Network Technology Co., Ltd. station building system has SQL injection vulnerabilities

Ltd. was established on September 02, 2002 in Renqiu City, Zhengzhong Network Technology Co. Legal representative Qiao Wenying, the company's scope of business includes: weak power and computer systems integration; computer, office automation and financial software, office supplies and computer...

Unauthorized Access Vulnerability in GLIS, a General Library Integrated Management System of Beijing Qingda Xinyang Technology Co.

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

Information leakage vulnerability in H5S CONSOLE of ZeroVision Technology (Shanghai) Co.

ZeroVision Technology Shanghai Co. was founded on 09/25/2018. Legal representative Xue Shuimu, the company's business scope includes: engaged in computer technology, network technology, electromechanical technology, electronic technology, information technology, digital technology, communication...

Intel RST User Interface / Driver Privilege Escalation Exploit

Hi @ll, more than 2 years ago I disclosed 2 vulnerabilities leading to local escalation of privilege in the Intel® Rapid Storage Technology Intel® RST User Interface and Driver: see and Intel fixed this vulnerability only in their executable installer. Some time later Intel rewrote or rebuilt thi...

Weak Password Vulnerability in Multiple Systems at PCCW Technology

INFOGO TECHNOLOGY CO.,LTD is a leading information security vendor specializing in the research, development, sales and service of network access control NAC products. INFOGO TECHNOLOGY CO., LTD is a leading information security vendor specializing in the research, development, sales and service ...