SQL Injection Vulnerability in Enterprise Standardized Management System of R&S Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a company that deals with technology development in the field of information technology, cloud computing, and Internet of Things IoT technology. There is a SQL injection vulnerability in the Enterprise Standardized Management System of R&S...

Unauthorized Access Vulnerability in Homs5.0 Monitoring Center of Beijing Shuoren Times Technology Co.

Homs5.0 monitoring center is a monitoring system platform for high-end system applications developed on the basis of years of monitoring software system platform development accumulation launched by Beijing Shuo Ren Times Technology Co. Beijing Shuoren Times Technology Co., Ltd Homs5.0 monitoring...

SQL Injection Vulnerability in Enterprise Standardization Management System of Runshen Information Technology (Shanghai) Co.

R&S Information Technology Shanghai Co., Ltd. is a company that operates in the field of information technology, cloud computing, Internet of Things technology, such as technology development. There is a SQL injection vulnerability in the enterprise standardization management system of R&S...

150,000 Verkada security cameras hacked—to make a point

Hackers were able to gain access to camera feeds from Verkada, a tech company that specializes in video security and physical access control, to demonstrate how prevalent surveillance is, reports say. Unfortunately, it also exposed the inner workings of hospitals, clinics, and mental health...

The 5 Best and Secure Facial Recognition Tools

By Owais Sultan Over the years there have been several well-documented issues with facial recognition technology. Let's discuss facial recognition tech in detail. This is a post from HackRead.com Read the original post: The 5 Best and Secure Facial Recognition Tools...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager Oct 2020 CPU (CVE-2020-14781)

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition used by IBM Tivoli System Automation Application Manager. These issues were disclosed as part of the IBM Java SDK updates in Oct 2020. Vulnerability Details CVEID: CVE-2020-14781 DESCRIPTION: An unspecified vulnerabilit...

File Upload Vulnerability in Droton Mental Health Cloud Platform Software

Jiangsu Zhodun Information Technology Co., Ltd. is an Internet dual-soft, high-tech enterprise specializing in the research and application of psychological big data. There is a file upload vulnerability in the software of ZhuoDun Mental Health Cloud Platform, which can be exploited by an attacke...

Arbitrary File Read Vulnerability in Hangzhou CUHK Netcallserver Management Console

Founded in 1993, Hangzhou Xinzhongda Technology Co., Ltd. is a professional information technology solution provider in the fields of project management, intelligent construction, financial and tax management, and government finance management. An arbitrary file read vulnerability exists in the...

ForkCMS PHP Object Injection

ForkCMS PHP Object Injection ========================= | Identifier: | AIT-SA-20210215-04 | | Target: | ForkCMS | | Vendor: | ForkCMS | | Version: | all versions below version 5.8.3 | | CVE: | CVE-2020-24036 | | Accessibility: | Remote | | Severity: | Medium | | Author: | Wolfgang Hotwagner AIT...

File Containment Vulnerability in Hangzhou New CUHK Netcallserver Management Console

Founded in 1993, Hangzhou Xinzhongda Technology Co., Ltd. is a professional information technology solution provider in the fields of project management, intelligent construction, financial and tax management, and government finance management. A file inclusion vulnerability exists in the Hangzho...

Unauthorized Access Vulnerability in Enterprise Routers of Chengdu ZhiBee.com Technology Co.

Founded in October 2016, Chengdu ZhiBee.com Technology Limited Liability Company is an emerging high-tech company integrating research and development, production and sales. An unauthorized access vulnerability exists in the enterprise router of Chengdu ZhiBee.com Technology LLC, which can be...

QCubed 3.1.1 PHP Object Injection

QCubed PHP Object Injection =========================== | Identifier: | AIT-SA-20210215-01 | | Target: | QCubed Framework | | Vendor: | QCubed | | Version: | all versions including 3.1.1 | | CVE: | CVE-2020-24914 | | Accessibility: | Remote | | Severity: | Critical | | Author: | Wolfgang Hotwagne...

QCubed 3.1.1 Cross Site Scripting

QCube Cross-Site-Scripting ====================== | Identifier: | AIT-SA-20210215-03 | | Target: | QCubed Framework | | Vendor: | QCubed | | Version: | all versions including 3.1.1 | | CVE: | CVE-2020-24912 | | Accessibility: | Remote | | Severity: | High | | Author: | Wolfgang Hotwagner AIT...

Memory Corruption Vulnerability in MaxSoft PDF Editor (CNVD-2021-23575)

Aosoft PDF Editor is a pdf office software produced by Netsuke Technology Co. It can realize the functions of displaying and editing pdf files. Aosoft PDF Editor has a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Fast Random Bit Generation

Science has a paper and commentary on generating 250 random terabits per second with a laser. I dont know how cryptographically secure they are, but that can be cleaned up with something like Fortuna. EDITED TO ADD 3/12: Here are free versions of the paper and the commentary...

Weak Password Vulnerability in TopVPN 6000 by Skyrunner

Skyrise Technology Group Skyrise is a provider of network security, big data and security cloud services. A weak password vulnerability exists in Tianrongxin TopVPN6000. Attackers utilize the vulnerability to log into the backend and obtain sensitive information...

FIN8 Hackers Return With More Powerful Version of BADHATCH PoS Malware

Threat actors known for keeping a low profile do so by ceasing operations for prolonged periods in between to evade attracting any attention as well as constantly refining their toolsets to fly below the radar of many detection technologies. One such group is FIN8, a financially motivated threat...

Zhengzhou Wolong website builder system has SQL injection vulnerability

Zhengzhou Wolong Software Development Co., Ltd, was registered in Henan Province on 2013-03-11, belongs to the information transmission, software and information technology services industry, the main industry is software and information technology services industry, the service field is computer...

Qingdao Kechuang Internet Technology Co., Ltd. website building system suffers from sql injection vulnerability

Ltd. is a high-tech science and technology enterprise integrating software development, website construction, system integration, mobile APP development, mobile online shopping mall, and Internet application service. Qingdao Kechuang Internet Technology Co., Ltd. website construction system there...

Weak password vulnerability in SECCN G20 VPN of Guangzhou Dingcheng Information Technology Company Limited (CNVD-2021-22989)

Guangzhou Dingcheng Information Technology Co., Ltd DCT is one of the earliest high-tech enterprises engaged in the research and development of information security products in China. Ltd. SECCN G20 VPN has a weak password vulnerability that can be exploited by attackers to obtain sensitive...