Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology shipped with IBM Maximo Asset Management (CVE-2020-14782)

Summary CVE-2020-14782 was disclosed as part of the October 2020 Critical Patch Update. Java is used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for...

Support Live Chat

In more than 4 months since Qualys launched Support Live Chat on the Customer Support Portal, we’ve seen customers use it successfully to get answers to quick support questions. Based on its success, we are scaling internal processes to accommodate greater usage, and we encourage all customers to...

Arbitrary File Read Vulnerability in Chemical Virtual Simulation Laboratory of Beijing Obier Software Technology Development Co.

Ltd. is a high-tech enterprise focusing on the development and promotion of computer simulation technology, virtual reality technology, network technology, mainly dedicated to providing virtual simulation software, network platform and supporting hardware equipment development and technical...

Logic Flaw Vulnerability in Research Management System of Beijing Eplag Technology Co.

Research management system is a comprehensive management system for research units and management departments to conduct scientific research, and builds a scientific research management system integrating the functions of scientific research information portal, online office and scientific resear...

SQL Injection Vulnerability in Jiangsu Lianbang Information Technology Co.

Jiangsu Lianbang Information Technology Co., Ltd. is a high-tech enterprise integrating Internet and mobile Internet system research and development, smart city, traditional e-commerce transformation and digital media development. Jiangsu Lianbang Information Technology Co., Ltd. station building...

SQL Injection Vulnerability in Backstage Login of Website Building System of Shanghai Niomai Network Technology Co.

Ltd. is a software company focusing on serving small and medium-sized courier and logistics enterprises. With a deep understanding of the current situation and development direction of the management and service of Chinese and foreign courier and logistics enterprises, the company has created a...

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Ltd. was established in March 2001 in Qingdao, long-term service in the information technology and electronic industry at the forefront of high-tech positions, specializing in e-commerce, website production and maintenance and database development. There is a SQL injection vulnerability in Qingda...

Weak Password Vulnerability in Tianmai Technology's Network Video Surveillance System

Tianmai Technology is a national high-tech enterprise focusing on the field of intelligent public transportation, the company's main business is to provide comprehensive solutions for urban bus operation, management and service based on Telematics technology. There is a weak password vulnerabilit...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 vulnerabilities affecting InfoSphere Streams 4.3

Summary IBM SDK, Java Technology Edition Quarterly CPU - Jul 2020 - Includes Oracle Jul 2020 CPU plus one additional vulnerability vulnerabilities affecting InfoSphere Streams 4.3. Please see below for details. Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability ...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. These issues were disclosed as part of IBM SDK, Java Technology Edition Quarterly CPU - Oct 2020 - Includes Oracle Oct 2020 CPU minus...

Security Bulletin: IBM App Connect Enterprise is affected by vulnerabilities in IBM Java Runtime (CVE-2020-2601)

Summary Vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM App Connect Enterprise . These issues were disclosed as part of the IBM Java SDK updates in Jan 2020 Vulnerability Details CVEID: CVE-2020-2601 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java...

AWS, Cisco, and CompTIA Exam Prep — Get 22 Courses for $4.50 Each

You don't need a college degree to get a well-paid job in IT. But technical recruiters do expect to see key certifications on your résumé. If you would like to improve your chances of getting hired, "The 2021 All-In-One AWS, Cisco& CompTIA Super Certification Bundle" is worth your attention. This...

AMNESIA:33. (BSA-2020-1167)

Security Advisory ID: BSA-2020-1167 Component: Open source TCP/IP stacks. Revision: 1.1 Forescout Research Labs discovered 33 vulnerabilities impacting millions of IoT, OT, and IT devices that present an immediate risk for organizations worldwide.These vulnerabilities are named AMNESIA:33. Detail...

Divers Pull Rare Surviving WWII Enigma Cipher Machine from Bottom of the Baltic

German divers for the environmental group World Wildlife Fund were searching the ocean floor for abandoned nets threatening marine wildlife. What they found instead is a treasured piece of computing history, a World War II-era German Enigma crypto machine, sunk to the bottom of the Baltic Sea to...

Amnesia:33

Amnesia:33 is a group of 33 vulnerabilities in open-source TCP/IP stack libraries. The vulnerabilities may be present in a wide range of operational technology, IoT, and connected device implementations. Recent assessments: ccondon-r7 at December 08, 2020 9:05pm UTC reported: Sorta relying here o...

Congrats to the winners of the 2020 December Metasploit community CTF

Thank you all that participated in the 2020 December Metasploit community CTF! The four day CTF was well received by the community, with 874 teams and 1903 users registered! We’ve included the high-level stats and the competition winners below. If you played the CTF and want to let the Metasploit...

Attention Client is vulnerable to dll hijacking

Attention Client is a high-definition video communication cloud terminal launched by Suirui Technology for government, enterprises and other industrial customers. There is a dll hijacking vulnerability in Attention Client. An attacker can use this vulnerability to load a malicious dll and execute...

SQL Injection Vulnerability in Website Building System of Yuanqi Technology (Beijing) Co.

Ltd. was founded in May 2014, is committed to become a "private cloud-based service provider of a new generation of enterprise information management system". A SQL injection vulnerability exists in the website building system of Yuanqi Technology Beijing Co., Ltd, which can be exploited by...

Weak Password Vulnerability in Firewall Gateway Management System

Yoyo is a registered trademark of Shenzhen Hechen Communication Technology Co., Ltd, founded in 1998, the main products are Mailgard Yoyo series mail servers, mail archiving, spam filtering gateway, mail gateway, global mail gateway, mail load balancing gateway, firewalls, VPNs, etc. Yoyo is the...

Cixi Youcheng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Cixi Youcheng Network Co., Ltd. is located in the professional Internet technology services, network services and software development as the main body, for the majority of customers to provide network integration, marketing, service as one of the comprehensive network company. Cixi Youcheng...