Information leakage vulnerability in the standard version of PHPEMS online simulation test system of Xinxiang City Falling Pen Thousand Words Network Technology Co.

PHPEMS online mock exam system is developed based on PHP+Mysql and supports multiple question types and presentation methods. The standard version of PHPEMS Online Mock Exam System of Xinxiang Falling Words Network Technology Co., Ltd. has an information leakage vulnerability, which can be...

SQL Injection Vulnerability in the Website Building System of Changzhou Oceanic Network Technology Co.

Changzhou Oceanus Network Technology Co., Ltd. was founded in March 2005, is committed to creating a corporate brand website custom design and development of the industry's influential brand enterprises. There is a SQL injection vulnerability in the website system of Changzhou Oceanic Network...

Arbitrary File Upload Vulnerability in Content Management System of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. is a professional company providing enterprise information construction application and promotion services. The content management system of Nanchang Boran Technology Co., Ltd. suffers from an arbitrary file upload vulnerability, which can be exploited by...

Denial of Service Vulnerability in KingbaseES of Beijing NPC Kingcang Information Technology Co.

KingbaseES V8R3 is a new database product for transaction processing and analytical applications. A denial of service vulnerability exists in KingbaseES, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in 5vshop E-commerce System of Shijiazhuang Zhenhong Network Technology Co.

5vshop belongs to Shijiazhuang Zhenghong Network Technology Co., Ltd, since 2004 has been committed to the enterprise Internet application of related services, engaged in enterprise, personal e-commerce website construction; e-commerce project planning, creativity, operation, to provide a...

Information leakage vulnerability in content management system of Nanchang Boran Technology Co.

Nanchang Boran Technology Co., Ltd. was founded in April 2009, for Nanchang various large and medium-sized enterprises to design and produce websites, business scope design website planning, web design, website construction, website optimization and search engine optimization and other services...

Logic Flaw Vulnerability in Talent Recruitment System of Lian Yi Technology Co.

Lianyi Technology Co., Ltd. provides universities and colleges to provide management, service, teaching, research and other full-scene products and services. A logic flaw exists in the Talent Recruitment System of Lianyi Technology Company Limited, which can be exploited by an attacker to reset a...

Denial of Service Vulnerability in GBase 8a Database of Tianjin Nanda General Data Technology Co.

GBase 8a is a column-store relational database management system with efficient and complex statistical and analytical capabilities, capable of managing terabytes of data. A denial-of-service vulnerability exists in the GBase 8a database of Tianjin Nanda General Data Technology Company Limited,...

Unique Threats to Operational Technology and Cyber Physical Systems

In this latest episode of our Eye on Security podcast, I talk all about the world of operational technology OT and cyber physical systems with one of our foremost experts on the topic: Nathan Brubaker, Senior Manager of Analysis for Mandiant Threat Intelligence. Nathan kicked off our chat by...

Lock and Code S1Ep11: Locating concerns of Bluetooth and beacon technology with Chris Boyd

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Chris Boyd, lead malware intelligence analyst for Malwarebytes, about Bluetooth and beacon technology. Last month, cybersecurity experts warned the publi...

Henan Qingfeng Network Technology Co., Ltd. Zhimei cloud website site system file upload vulnerability

Henan Qingfeng Network Technology Co., Ltd. is a high-tech company mainly operating in network services, engaged in website production, network marketing planning, software development, talent information services and other businesses. Henan Qingfeng Network Technology Co., Ltd. Zhimei cloud...

File Upload Vulnerability in SentCMS of Nanchang Tengshu Technology Co.

SentCMS is a website management system created by Nanchang Tengshu Technology Co. Ltd. SentCMS suffers from a file upload vulnerability that can be exploited by attackers to upload scripts and gain control of the web server...

Code Execution Vulnerability in OurPHP at Harbin Weicheng Technology Co.

OurPHP Aopia website building system is a enterprise + e-commerce marketing website building system. Harbin Weicheng Technology Co., Ltd OurPHP has a code execution vulnerability that can be exploited by attackers to gain server privileges...

SQL Injection Vulnerability in ECShop Mall System of Shanghai ShangPai Network Technology Co.

Founded in 2002, Shanghai Shangpai Network Technology Co., Ltd. is a professional e-commerce system and service provider in China. A SQL injection vulnerability exists in the ECShop Mall system of Shanghai ShangPai Network Technology Co., Ltd, which can be exploited by attackers to obtain sensiti...

Logic Flaw Vulnerability in the Great Practice Series Teaching Management System of Kok Jin Information Technology Ltd.

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A logic flaw exists in the GJIT Large Practice Series Teaching Management System, which can be exploited by an attacker to reset any user's password...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 - Includes Oracle Jan 2020 CPU affect IBM Content Classification

Summary There is vulnerability in IBM® Runtime Environment Java™ Version 6 and Java™ 7 that is used by IBM Content Classification. This issue was disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details CVEID: CVE-2020-2805 DESCRIPTION: An unspecified vulnerability in Java...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Jan 2020 - Includes Oracle Jan 2020 CPU affect IBM Content Classification

Summary There is vulnerability in IBM® Runtime Environment Java™ Version 6 and Java™ 7 that is used by IBM Content Classification. This issue was disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details CVEID: CVE-2020-2583 DESCRIPTION: An unspecified vulnerability in Java...

File upload vulnerability in MCMS backend up***.do page

MCMS is a website building system of MINGFEI TECHNOLOGY CO. A file upload vulnerability exists in the MCMS backend up.do page. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Wenzhou Qiaoyu Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2020-48944)

Wenzhou Qiaoyu Technology Co., Ltd. is a focus on website construction, micro-site development, network marketing services SEO optimization as one of the innovative level of the company. Wenzhou Qiaoyu Technology Co., Ltd. website building system SQL injection vulnerability, attackers can use the...

kapar.or.kr Cross Site Scripting vulnerability OBB-1227968

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...