File upload vulnerability in MCms backend of Jiangxi Minsoft Technology Co.

Jiangxi Minsoft Technology Co., Ltd. business scope includes: information technology consulting services; Internet information services; computer software technology development and so on. Jiangxi Minsoft Technology Co., Ltd. MCms background file upload vulnerability, attackers can use the...

Deception Technology: No Longer Only A Fortune 2000 Solution

A cyber-attacker successfully breaks into your environment and begins sneaking around to find something valuable - intellectual property, bank account credentials, company plans, whatever. The attacker makes his way to a certain host on a network node to browse the directories, and suddenly, his...

Deception Technology: No Longer Only A Fortune 2000 Solution

A cyber-attacker successfully breaks into your environment and begins sneaking around to find something valuable - intellectual property, bank account credentials, company plans, whatever. The attacker makes his way to a certain host on a network node to browse the directories, and suddenly, his...

Harbin Weicheng Technology Co., Ltd. OurPHP Ao Pai station building system exists arbitrary file deletion vulnerability

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. Harbin Weicheng Technology Co., Ltd OurPHP AoPai website builder system exists arbitrary file deletion vulnerability, an attacker can take advantage of the vulnerability to delete any file under t...

XSS vulnerability in 74cms of Taiyuan Xunyi Technology Co.

74cms is a free and open source professional recruitment system based on PHP+MYSQL as the core development. Taiyuan Xunyi Technology Co., Ltd. 74cms XSS vulnerability, attackers can use the vulnerability to obtain sensitive information such as administrator cookies...

Heap Overrun Read Vulnerability in ABC Lookup of Shanghai Zhanmeng Network Technology Co. Ltd (CNVD-2020-64625)

ABC Viewer is a permanent free image viewing software, intelligently turns on hardware acceleration and supports a variety of image formats. ABC Viewer has a heap out-of-bounds read vulnerability, which can be exploited to cause the software to crash...

QBot Trojan delivered via malspam campaign exploiting US election uncertainties

This blog post was authored by Jérôme Segura and Hossein Jazi. The 2020 US elections have been the subject of intense scrutiny and emotions, while happening in the middle of a global pandemic. As election night ended and uncertainty regarding the results began to creep in, threat actors decided t...

tmhri.technologypublisher.com Cross Site Scripting vulnerability OBB-1483537

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Police to Livestream Ring Camera Footage of Mississippi Residents

UPDATE Police in Mississippi are testing a program in which they can livestream video footage from private security cameras – including Ring doorbell cameras – installed at private homes and businesses. The program in Jackson, Miss., to use the Ring door cameras as part of surveillance efforts, i...

Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Netcool Configuration Manager.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Netcool Configuration Manager IP Edition v6.4.1 and v6.4.2, which were disclosed in the Oracle Jul 2020 Critical Patch Update. Vulnerability Details Refer to the security...

Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v4.1.1 and v4.2, which were disclosed in the Oracle Jul 2020 Critical Patch Update. Vulnerability Details Refer to the security bulletins listed in th...

Arbitrary Password Reset Vulnerability in Website Building System of Guangdong Desheng Technology Co.

Ltd. is a leading domestic integrated service provider for people's livelihood, providing information system construction and related operation services in the fields of human resources and social security, employment, finance, healthcare and big data, etc. It actively promotes the operation...

digitalgametechnology.com Cross Site Scripting vulnerability OBB-1478489

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64772)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64771)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64878)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A command execution vulnerability exists in NC Cloud of UFIDA...

Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64877)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A command execution vulnerability exists in NC Cloud of UFIDA...

Directory Traversal Vulnerability in Gas Call Distribution System of Shenzhen Puyan Computer Software Technology Co.

Shenzhen Puyan Computer Software Technology Co., Ltd. is a service provider specializing in providing information technology and intelligent products for gas enterprises. There is a directory traversal vulnerability in the gas call distribution system of Shenzhen Puyan Computer Software Technolog...

Unauthorized Access Vulnerability in Lean Value Stream Management System (LVS) at Hangzhou Gila Technology Co.

Hangzhou Gila Technology Co., Ltd. is an enterprise network service provider, is committed to providing customized solutions based on the needs of the enterprise network, to create a cloud service cloud network platform. An unauthorized access vulnerability exists in the Lean Value Stream...

survivaltechnology.co.za Cross Site Scripting vulnerability OBB-1471350

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...