SQL Injection Vulnerability in the Website Building System of Beijing YINO Internet Technology Co.

Beijing YNU Technology Co., Ltd. is a company that provides website construction, website optimization, website promotion, website development, web design and production services. There is a SQL injection vulnerability in the website building system of Beijing YNU Technology Co., Ltd, which can b...

Unauthorized Access Vulnerability in GLIS, the General Library Integrated Management System of Beijing Qingda Xinyang Technology Co. Ltd (CNVD-2021-25891)

Ltd. is a high-tech enterprise in Beijing New Technology Industrial Development Zone, with a registered capital of RMB 10 million yuan and a number of subsidiaries Beijing Zhongke Xinyang Science and Technology Co., Ltd. and Zhejiang Qingda Xinyang Science and Technology Co., Ltd.. Relying on the...

Hobby Lobby Exposes Customer Data in Cloud Misconfiguration

Arts-and-crafts retailer Hobby Lobby has suffered a cloud-bucket misconfiguration, exposing a raft of customer information, according to a report. An independent security researcher who goes by the handle “Boogeyman” uncovered the issue and reported it to Motherboard in an online chat, according ...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Netcool Impact (CVE-2020-2773)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Netcool Impact. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details CVEID: CVE-2020-2773 DESCRIPTION: An...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Netcool Impact (CVE-2020-14781)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Netcool Impact. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An...

Security Bulletin: A vulnerability in IBM® SDK, Java™ Technology Edition affects IBM Elastic Storage Server

Summary A vulnerability in IBM® SDK, Java™ Technology Edition, used by IBM Elastic Storage Server. This issue was disclosed as part of the IBM Java SDK updates in Jan 2021. Vulnerability Details CVEID: CVE-2020-27221 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a stack-based buffer overflow when...

SQL Injection Vulnerability in OA Collaboration Office System of Wuhan Wuxun Technology Co.

Wuhan Wocom Technology Co., Ltd. is a software vendor engaged in collaborative management. Wuhan Wocom Technology Co., Ltd OA collaborative office system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Anhui Hope Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-24767)

Anhui Hope Network Technology Co., Ltd. was founded in 2003, is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. There is a SQL injection vulnerability in the website building system of Anhui Hope Network Technology Co.,...

Command Execution Vulnerability in e-mobile

e-mobile is a mobile office product developed by Shanghai Panmicro Networks Technology Co., Ltd. and is specially designed for cell phone, tablet PC and other mobile terminal users to create a mobile office product. A command execution vulnerability exists in e-mobile, which can be exploited by a...

Anhui Hope Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Anhui Hope Network Technology Co., Ltd. was founded in 2003, is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. There is a SQL injection vulnerability in the website building system of Anhui Hope Network Technology Co.,...

Anhui Hope Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-24768)

Anhui Hope Network Technology Co., Ltd. was founded in 2003, is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. There is a SQL injection vulnerability in the website building system of Anhui Hope Network Technology Co.,...

Weak Password Vulnerability in Integration Gateway MIG of DeepTrust Technology Co.

Ltd. is a product and service provider focusing on enterprise-level security, cloud computing and infrastructure, with three business brands, namely, DeepsenSecure, Cloud and DeepsenSecure New IT, which are committed to carrying the cornerstone work in the process of digital transformation of use...

Anhui Hope Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-24766)

Anhui Hope Network Technology Co., Ltd. was founded in 2003, is an Internet basic product service provider mainly engaged in website construction, network promotion and network marketing. There is a SQL injection vulnerability in the website building system of Anhui Hope Network Technology Co.,...

XSS Vulnerability in the Website Building System of Beijing Tianrun Shunteng Technology Co.

Beijing Tianrun Shunteng Technology Co., Ltd. is a long-term service in the information technology and electronic industry at the forefront of high-tech positions, specializing in enterprise e-commerce, website software development, APP development and other related network value-added services...

Weak Password Vulnerability in TL-WR841HP of P&L Technology Ltd.

The TL-WR841HP is a 300Mbps, high power wireless router. A weak password vulnerability exists in the P&T TL-WR841HP, which can be exploited by an attacker to obtain sensitive information...

Beijing Tianrun Shunteng Technology Co., Ltd. website building system suffers from SQL injection vulnerability (CNVD-2021-24728)

Beijing Tianrun Shunteng Technology Co., Ltd. is a long-term service in the information technology and electronic industry at the forefront of high-tech positions, specializing in enterprise e-commerce, website software development, APP development and other related network value-added services...

SQL Injection Vulnerability in Beijing Tianrun Shunteng Technology Co.

Beijing Tianrun Shunteng Technology Co., Ltd. is a long-term service in the information technology and electronic industry at the forefront of high-tech positions, specializing in enterprise e-commerce, website software development, APP development and other related network value-added services...

Stored XSS Vulnerability in TongWeb Management Console at Beijing Orientop Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. A stored XSS vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information such as user cookies...

Security update for connman (moderate)

openSUSE Security Update: Security update for connman Announcement ID: openSUSE-SU-2021:0452-1 Rating: moderate References: 1181751 Cross-References: CVE-2021-26675 CVE-2021-26676 CVSS scores: CVE-2021-26675 NVD : 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-26676 NVD : 6.5...

SQL Injection Vulnerability in One Zero Technology's Website Building System

Zero-One Technology Ren is a business intelligence solutions provider that integrates consulting, professional services and product marketing. A SQL injection vulnerability exists in the website building system of ZeroOne Technology, which can be exploited by attackers to obtain sensitive...