SQL Injection Vulnerability in Research Management System of Beijing Eplag Technology Co.

Ltd. is a high-tech enterprise focusing on providing research informatization construction, research consulting, evaluation service and research transformation service for China's scientific research. A SQL injection vulnerability exists in the research management system of Beijing Eplag Technolo...

Command Execution Vulnerability in Tongda OA (CNVD-2021-21890)

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Buffer Overflow Vulnerability in Zijin Bridge Monitoring and Configuration Software

Daqing Zijinqiao Software Technology Co., Ltd. is one of the earliest companies in China to develop large-scale domestic real-time database products. A buffer overflow vulnerability exists in Zijinqiao's monitoring and configuration software, which can be exploited by attackers to cause arbitrary...

Arbitrary File Read Vulnerability in SPAdmin

SPAdmin is a backend management system can be quickly developed , integrated with rich third-party APP , the core technology SpringBoot, JPA, Shiro. SPAdmin has an arbitrary file read vulnerability, attackers can use this vulnerability to obtain sensitive information...

Harbin Weicheng Technology Co., Ltd. ourphp exists arbitrary file reading vulnerability

OURPHP is a brand, a PHP + MySQL development based on W3C standard building system. Harbin Weicheng Technology Co. ourphp there are arbitrary file reading vulnerability , attackers can use the vulnerability to obtain sensitive information...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Guardium

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Security Guardium. These issues were disclosed as part of the IBM Java SDK updates in July 2020. Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability in Java SE...

National Security Risks of Late-Stage Capitalism

Early in 2020, cyberspace attackers apparently working for the Russian government compromised a piece of widely used network management software made by a company called SolarWinds. The hack gave the attackers access to the computer networks of some 18,000 of SolarWinds’s customers, including US...

Weak Password Vulnerability in FW1000 Series Firewalls of Hangzhou Dipu Technology Co.

Hangzhou Dipu Technology Co., Ltd "Dipu Technology" is a high-tech listed enterprise integrating R&D, production and sales. A weak password vulnerability exists in the FW1000 series firewall of Hangzhou Dipu Technology Co. An attacker can use this vulnerability to log into the backend and obtain...

Information Disclosure Vulnerability in Omnicom's NATouch Touchscreen Configuration Software

hereinafter referred to as "Aotuo Technology", the company's independent intellectual property rights of the products covering programmable controllers, human-machine interfaces, configuration software and so on. An information leakage vulnerability exists in the NATouch touchscreen configuration...

SQL Injection Vulnerability in the Anti-Desertion Platform of Zhejiang Dahua Technology Co. Ltd. for Medical Treatment Outside the Company (CNVD-2021-21755)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the anti-evasion platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to obtain sensitive information in...

SQL Injection Vulnerability in 1039, Inc.'s Home and School

Beijing One Zero Three Nine Technology Development Co., Ltd 1039 Company for short is a technology enterprise specializing in standardized software development and large-scale applied platform for the training industry, and is a partner in the information construction of the training industry. A...

Niu Mai Network Technology Co., Ltd. website builder system has SQL injection vulnerability

Niu Mai Network Technology Co., Ltd. is dedicated to the design, production and development of courier management systems and corporate websites. There is a SQL injection vulnerability in Niu Mai Network Technology Co. An attacker can exploit the vulnerability to obtain sensitive information from...

Directory Traversal Vulnerability in Weilian Technology WiSCADA

WiSCADA industrial configuration software is a 3D industrial configuration software product that supports Windows, Android and IOS cross-platform. A directory traversal vulnerability exists in Weilian Technology WiSCADA. An attacker can exploit this vulnerability to obtain sensitive information...

Weilian Technology WiSCADA suffers from information leakage vulnerability

WiSCADA industrial configuration software is a 3D industrial configuration software product that supports Windows, Android and IOS cross-platform. An information disclosure vulnerability exists in Weilian Technology WiSCADA. An attacker can exploit the vulnerability to obtain sensitive informatio...

Directory Traversal Vulnerability in Weilian Technology WiSCADA (CNVD-2021-21768)

WiSCADA industrial configuration software is a 3D industrial configuration software product that supports Windows, Android and IOS cross-platform. A directory traversal vulnerability exists in Weilian Technology WiSCADA. An attacker can exploit this vulnerability to obtain sensitive information...

SQL Injection Vulnerability in the Anti-Desertion Platform of Zhejiang Dahua Technology Co. Ltd. for Medical Treatment Outside the Company (CNVD-2021-21758)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the anti-evasion platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to obtain sensitive information in...

SQL Injection Vulnerability in Wando Technology's Website Building System

Wando Technology is an information technology company dedicated to enterprise informationization application services, and is an application service provider for enterprises to provide Internet-based business solutions. A SQL injection vulnerability exists in Wando Technology's website builder...

Information leakage vulnerability in the omni-channel customer service system of Foshan Beame Information Technology Co.

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an information leakage vulnerability in the omni-channel customer service system of Foshan Beamy Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Intelligent AC Authorization Centralized Management Platform of Shenzhen Vimax Technology Co.

Ltd. is a network total solution and smart home solution provider. Ltd. smart AC authorization centralized management platform has a weak password vulnerability, which can be exploited by attackers to log into the system...

SSRF Vulnerability in Omni-Channel Customer Service System of Foshan Beamy Information Technology Co.

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. Ltd. omni-channel customer service system exists SSRF vulnerability, attackers can use the vulnerability to read arbitrary files...