SQL Injection Vulnerability in PatrolFlow of Beijing Byzoro Network Technology Co.

PatrolFlow is a multi-service security gateway intelligent management platform of Beijing Byzoro Network Technology Co. A SQL injection vulnerability exists in PatrolFlow of Beijing Byzoro Networks Technology Co. An attacker can exploit the vulnerability to obtain sensitive database information...

The Results Are In: Defender Confidence Is On The Rise

Recently, I spent two weeks traveling across Europe talking with defenders, reporters, and leaders of security programs. While each country faces its own unique challenges and has its own needs, there were a few themes that were consistently present. Threat Outlook Report 2020. Naturally, we...

Changsha Tian Er Network Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities

Changsha Tian Er Network Technology Co., Ltd. is a technology-based development company. Changsha Tian Er Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jeecg-Boot v2.1.4 at Beijing Guo Torch Information Technology Co.

Jeecg-Boot is a code generator based rapid development platform , using front-end and back-end separation architecture : SpringBoot 2.x, Ant Design & Vue, Mybatis-plus, Shiro, JWT. Beijing Guo Torch Information Technology Co. Jeecg-Boot v2.1.4 suffers from a SQL injection vulnerability, which can...

Principles of a Cloud Migration – From Step One to Done

Boiling the ocean with the subject, sous-vide deliciousness with the content. Cloud Migrations are happening every day. Analysts predict over 75% of mid-large enterprises will migrate a workload to the cloud by 2021 – but how can you make sure your workload is successful? There are not just facto...

'Fake Fingerprints' Bypass Scanners with 3D Printing

New research has found that it’s possible to use 3D printing technology to create “fake fingerprints” that can bypass most fingerprint scanners used by popular devices. But, creating the attack remains costly and time-consuming. Researchers with Cisco Talos created different threat models that us...

COVID-19 CISO Checklist for Securing a Remote Workforce

The Coronavirus crisis introduces a heavy burden on the CISO with the joint impact of a mass transition to working remotely coupled with a surge of cyberattacks that strive to monetize the general chaos. Security vendors, unintendedly, contribute to this burden by a relentless generation of noise...

SQL Injection Vulnerability in Tongda OA of Beijing Tongda Science & Technology Co.

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Unauthorized Access Vulnerability in Qinhuangdao Business View Technology Co.

Qinhuangdao Business View Technology Co., Ltd. was founded in 2001, customized website, network marketing as one of the network service company. An unauthorized access vulnerability exists in the website building system of Qinhuangdao Business View Technology Co. Ltd, which can be exploited by an...

SQL Injection Vulnerability in Website Building System of Qinhuangdao Shangjing Technology Company Limited (CNVD-2020-24437)

Qinhuangdao Business View Technology Co., Ltd. was founded in 2001, customized website, network marketing as one of the network service company. A SQL injection vulnerability exists in the website building system of Qinhuangdao Business View Technology Limited, which can be exploited by attackers...

IBM Security Information Queue Information Disclosure Vulnerability (CNVD-2020-22188)

IBM Security Information Queue is a data integration product from IBM USA. The product utilizes Kafka technology and a publish-subscribe model to integrate data between IBM security products. A security vulnerability exists in IBM Security Information Queue ISIQ that stems from the program failin...

IBM Security Information Queue Information Disclosure Vulnerability (CNVD-2020-22191)

IBM Security Information Queue is a data integration product from IBM USA. The product utilizes Kafka technology and a publish-subscribe model to integrate data between IBM security products. A security vulnerability exists in IBM Security Information Queue. An attacker could exploit the...

IBM Security Information Queue Unauthorized Operation Vulnerability

IBM Security Information Queue is a data integration product from IBM USA. The product utilizes Kafka technology and a publish-subscribe model to integrate data between IBM security products. A security vulnerability exists in IBM Security Information Queue ISIQ that stems from a program's failur...

Secure Remote Working During COVID-19 — Checklist for CISOs

Coronavirus crisis introduces a heavy burden on the CISOs with the collective impact of a mass transition to working remotely coupled with a surge of cyberattacks that strive to monetize the general chaos. Security vendors, unintendedly, contribute to this burden by a relentless generation of noi...

SQL Injection Vulnerability in RuvarOA Collaboration Office System of Guangzhou Luhua Computer Co.

Luvar RuvarOA collaborative office system adopts three-tier structure model, the system development adopts java technology, the database supports Mysql, SQL Server, Oracle and so on. There is a SQL injection vulnerability in the RuvarOA system of Guangzhou Luhua Computer Co., Ltd, which can be...

XSS Vulnerability in Shanghai Fenghu Chain Information Technology Co.

It is a digital integral ecological alliance operation platform jointly initiated by Xin.com E-commerce Group, CCB International and UnionPay Business, and co-invested by Bank of China, China Mobile, and China Eastern Airlines. Shanghai Fenghu Chain Information Technology Co., Ltd. has an XSS...

Memory Corruption Vulnerability in Wisdom Security Terminal of Beijing Wisdom Technology Co.

Ltd. is a technology company specializing in the research and development of Internet information security products. There is a memory corruption vulnerability in the Beijing Wisdom Technology Co., Ltd Wisdom Security Terminal, which can be exploited by attackers to cause a process crash and deni...

SQL Injection Vulnerability in the E-commerce System of Hunan One Eight Network Technology Co.

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. There is a SQL injection vulnerability in the Laike Push e-commerce system of Hunan One Eight Network Technology Co. Ltd, which can be exploited by an attacker to obtain...

Memory Corruption Vulnerability in the Wisdom Security Terminal of Beijing Wisdom Technology Co. Ltd (CNVD-2020-25322)

Ltd. is a technology company specializing in the research and development of Internet information security products. There is a memory corruption vulnerability in the Beijing Wisdom Technology Co., Ltd Wisdom Security Terminal, which can be exploited by attackers to cause a process crash and deni...

Unauthorized Access Vulnerability in Xeondi Technology's One Card Communication Service Client

The XIONGDY Technology OneCard Communication Service Client is a one-card management system of XIONGDY Co. An unauthorized access vulnerability exists in the Xiondi Technology One Card Communication Service Client, which can be exploited by an attacker to gain unauthorized access to the system an...