File Upload Vulnerability in Multiple Platforms of Nanjing Kuchi Information Technology Co.

Nanjing Kuchi Information Technology Co., Ltd. is a high-tech enterprise integrating R&D, sales and service. A file upload vulnerability exists in several platforms of Nanjing Kuchi Information Technology Co. Attackers can utilize the vulnerability to upload webshell and gain server privileges...

US Schools Are Buying Cell Phone Unlocking Systems

Gizmodo is reporting that schools in the US are buying equipment to unlock cell phones from companies like Cellebrite: Gizmodo has reviewed similar accounting documents from eight school districts, seven of which are in Texas, showing that administrators paid as much $11,582 for the controversial...

Microsoft Says Its Systems Were Also Breached in Massive SolarWinds Hack

The massive state-sponsored espionage campaign that compromised software maker SolarWinds also targeted Microsoft, as the unfolding investigation into the hacking spree reveals the incident may have been far more wider in scope, sophistication, and impact than previously thought. News of...

Treck TCP/IP Stack (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely Vendor: Treck Inc. Equipment: TCP/IP Vulnerability : Heap-based Buffer Overflow, Out-of-bounds Read, Out-of-bounds Write The Treck TCP/IP stack may be known by other names such as Kasago TCP/IP, ELMIC, Net+ OS, Quadnet, GHNET v2,...

ShopsN open source mall system suffers from SQL injection vulnerability (CNVD-2020-75325)

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd., a full-featured in line with enterprise-class commercial standards for free commercial use of the open source online store full network system . ShopsN open source mall system SQL injection vulnerability...

DLL Hijacking Vulnerability in XMind8 (Windows Client)

Shenzhen AIS Software Technology Co., Ltd. business scope includes: computer software and hardware, mobile Internet technology development, gift sales; domestic trade, business import and export, etc.. XMind8 Windows client has a DLL hijacking vulnerability that can be exploited by attackers to...

SQL Injection Vulnerability in the Website Building System of Beijing SUNNETWISE TECHNOLOGY CO.

Ltd. specializes in website construction, website design, small and medium-sized enterprise management software development. There is a SQL injection vulnerability in the website building system of Beijing Sunwealth Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

Easy Emulator Personal Edition suffers from a local boost vulnerability

The business scope of Shanghai Maiwei Software Technology Co., Ltd. includes: engaging in technology development, technology transfer, technical consultation, technical services in the field of communication technology, computer technology, computers, software and auxiliary equipment. There is a...

A breakthrough year for passwordless technology

As 2020 draws to a close, most of us are looking forward to putting this year in the rearview mirror. Since we depend even more on getting online for everything in our lives, we’re more than ready to be done with passwords. Passwords are a hassle to use, and they present security risks for users...

A breakthrough year for passwordless technology

As 2020 draws to a close, most of us are looking forward to putting this year in the rearview mirror. Since we depend even more on getting online for everything in our lives, we’re more than ready to be done with passwords. Passwords are a hassle to use, and they present security risks for users...

Mexican Drug Cartels with High-Tech Spyware

Sophisticated spyware, sold by surveillance tech companies to Mexican government agencies, are ending up in the hands of drug cartels: As many as 25 private companies -- including the Israeli company NSO Group and the Italian firm Hacking Team -- have sold surveillance software to Mexican federal...

SQL Injection Vulnerability in Environmental Automatic Monitoring System of Jiangsu Sanxi Technology Co.

The business scope of Jiangsu Sanxi Technology Co., Ltd. includes: environmental monitoring and control systems, automation systems, information management systems, computers, communications, control systems, and other types of systems such as software and hardware development. Jiangsu Sanxi...

SQL Injection Vulnerability in the Frontend of Enterprise Website Building System of Zibo Shining Network Technology Co. Ltd (CNVD-2020-73484)

Zibo Shining Network Technology Co., Ltd. enterprise station building system is a specialized solution for enterprise station building products. There is a SQL injection vulnerability in the frontend of Zibo Shining Network Technology Co. Ltd enterprise website building system, which can be...

Weixin open source WeChat public number management system has XSS vulnerabilities

The business scope of Cebu City Taosheng Network Technology Co., Ltd. includes: network technology research and development, consulting, services, electronic equipment sales, Internet information services, operating telecommunications business, etc...

SQL Injection Vulnerability in the Website Building System of Beijing Leader Shengshi Network Technology Development Center (CNVD-2020-73458)

Founded in 2007, Beijing Leader Shengshi Network Technology Development Center is a professional network company that provides a full range of corporate digital services, APP WeChat development and operation, website construction and network marketing services. There is a SQL injection...

File Download Vulnerability in e-CRF+ Series Software of Hangzhou Icove Technology Co.

The business scope of Hangzhou Icove Technology Co., Ltd. includes: the technical development of computer hardware and pharmaceutical electronic products, the development and production of computer software, and the provision of related technical services. Hangzhou Icove Technology Co. e-CRF+...

File Upload Vulnerability in netcall of Hangzhou Xinzhongda Technology Co.

netcall is based on the open source communication protocol xmpp development of instant messaging software . A file upload vulnerability exists in netcall of Hangzhou Xinzhongda Technology Co., Ltd. that can be exploited by an attacker to gain server control privileges...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM ILOG CPLEX Optimization Studio

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM CPLEX Optimization Studio. IBM CPLEX Optimization Studio has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered with this product...

Millions of Unpatched IoT, OT Devices Threaten Critical Infrastructure

Thousands of organizations remain at risk from the URGENT/11 and CDPwn collections of vulnerabilities, which affect operational technology OT gear and internet of things IoT, respectively. Unfortunately, there has been a rampant lack of patching, researchers said. According to researchers at Armi...

Security Bulletin: Vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Cast Iron & App Connect Professional . These issues were disclosed as part of the IBM Java SDK updates in January 2020 have been addressed the applicable CVEs Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An...