Security Bulletin: CVE-2020-14782 may affect IBM® SDK, Java™ Technology Edition for Content Collector for SAP Applications

Summary CVE-2020-14782 was disclosed as part of the Oracle October 2020 Critical Patch Update. Vulnerability Details CVEID: CVE-2020-14782 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause no confidentiality...

Directory Traversal Vulnerability in MAC1200R of Shenzhen Meike Star Communication Technology Co.

The MAC1200R is a wireless router. A directory traversal vulnerability exists in the MAC1200R of Shenzhen Mecstar Communication Technology Co. An attacker can exploit the vulnerability to obtain sensitive information...

Operation Dianxun Cyberespionage Campaign Targeting Telecommunication Companies

ARCHIVED STORY Operation Diànxùn: Cyberespionage Campaign Targeting Telecommunication Companies By Thomas Roccia · MAR 16, 2021 In this report the McAfee Advanced Threat Research ATR Strategic Intelligence team details an espionage campaign, targeting telecommunication companies, dubbed Operation...

SQL injection vulnerability in the website building system of Binnet Network Technology Service Department, Tianxin District, Changsha (CNVD-2021-24449)

Changsha Tianxin District Binnet Network Technology Service Department is a company engaged in corporate website construction, website promotion and other projects. Changsha Tianxin District Bin.com Network Technical Services Department website building system has a SQL injection vulnerability,...

Arbitrary File Download Vulnerability in WiseStar Universal Collection Management System

Huixing Software Technology Co., Ltd. specializes in the development of software for the water industry. It has developed a series of management software for the water industry: Huixing Water Charge Management System, Huixing Water Business Management Information System, Huixing Water Expansion a...

Mingyuan Cloud ERP has information leakage vulnerability

Shenzhen Mingyuan Cloud Technology Co., Ltd. is a real estate ecosystem digital service provider. Information leakage vulnerability exists in Mingyuan Cloud ERP. Attackers can utilize the vulnerability to obtain sensitive information...

Weak Password Vulnerability in Internet Video Browser of Tiandiweiye Technology Co.

Tiandiweiye is an intelligent security solution provider, based on artificial intelligence, big data, cloud computing, Internet of Things and other technologies, providing intelligent video products, system solutions and high-quality technical services for public security, politics and law,...

Arbitrary File Deletion Vulnerability in WiseStar Universal Collection Management System

Huixing Software Technology Co., Ltd. specializes in the development of software for the water industry. It has developed a series of management software for the water industry: Huixing Water Charge Management System, Huixing Water Business Management Information System, Huixing Water Expansion a...

SQL Injection Vulnerability in Photovoltaic Backend Management System of Shenzhen Crestec Technology Co.

Founded in 1993, Shenzhen Crestec Technology Co., Ltd. is an intelligent network energy service provider focusing on data center IDC and new energy field. A SQL injection vulnerability exists in the PV backend management system of Shenzhen Crestec Technology Co. An attacker can exploit the...

Command Execution Vulnerability in 11AC 1200MBPS Wireless Panel AP of Shenzhen Jixiang Tengda Technology Co Ltd (CNVD-2021-22530)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd. 11AC 1200MBPS Wireless Panel AP has a command execution vulnerability that can be...

SQL injection vulnerability in the water information management platform of Shandong Weimicro Technology Co.(CNVD-2021-22467)

Shandong Weimicro Technology Co., Ltd. is a science and technology-oriented enterprise mainly engaged in technology research and development. Shandong Weimicro Technology Co., Ltd. water information management platform has a SQL injection vulnerability, which can be exploited by attackers to obta...

Weak Password Vulnerability in KEDACOM Network Keyboard Console at Suzhou KEDA Technology Co.

Ltd. is a provider of video and security products and solutions. A weak password vulnerability exists in the KEDACOM Network Keyboard Console of Suzhou KEDA Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

SQL injection vulnerability in the backend of Tongda oa (CNVD-2021-22798)

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Xiaomi Router 4A Gigabit has a denial of service vulnerability

Xiaomi Router 4A Gigabit is a gigabit router from Xiaomi Technology LLC. A denial of service vulnerability exists in the Xiaomi Router 4A Gigabit Edition, which can be exploited by an attacker to cause a denial of service...

Command Execution Vulnerability in 11AC 1200MBPS Wireless Panel AP of Shenzhen Jixiang Tengda Technology Co Ltd (CNVD-2021-22529)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd. 11AC 1200MBPS Wireless Panel AP has a command execution vulnerability that can be...

Command Execution Vulnerability in Shanghai Atech Technology Co., Ltd.'s Aggressive 750W (CNVD-2021-22732)

The Aggressive 750W is an enterprise-grade wireless router. Ltd. Aggressive 750W suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in 11AC 1200MBPS Wireless Panel AP of Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd. 11AC 1200MBPS Wireless Panel AP has a command execution vulnerability that can be...

Directory Traversal Vulnerability in IDH Heat Network Monitoring and Management Platform of Beijing Shuo Ren Times Technology Co.

Beijing Shuoren Times Technology Co., Ltd. is one of the leading high-tech enterprises in the heating industry. Ltd. IDH heat network monitoring and management platform has a directory traversal vulnerability, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Homs 5.0 Monitoring Center of Beijing Shuoren Times Technology Co. Ltd (CNVD-2021-22537)

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Beijing Shuoren Times Technology Co., Ltd Homs5.0 monitoring...

SQL Injection Vulnerability in IDH Heat Network Monitoring and Management Platform of Beijing Shuo Ren Times Technology Co.

Beijing Shuoren Times Technology Co., Ltd. is one of the leading high-tech enterprises in the heating industry. Beijing Shuoren Times Technology Co., Ltd. IDH heat network monitoring and management platform there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...