SQL Injection Vulnerability in Stone Technology Online Exam System

Stone Technology Online Exam System is a php/mysql based exam management system. Stone Technology Online Exam System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Longmen Technology Website Building System

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. There is a SQL injection vulnerability in the website building system of LongmenTech, which can be exploited by attackers to obtain...

Denial of Service Vulnerability in Wooboo Renovation for Android

WoNiu Decoration is a life decoration mobile software developed by Shanghai Lingdao Information Technology Co. A denial of service vulnerability exists in WoNiu Renovation for Android, which can be exploited by attackers to cause a denial of service...

Extreme PDF Reader suffers from a memory corruption vulnerability (CNVD-2020-25780)

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Memory Corruption Vulnerability in Extreme PDF Reader

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Arbitrary File Read Vulnerability in TRS WAS at TORS Information Technology Inc.

TORS Information Technology Co. is a provider of artificial intelligence and big data technology and data services. An arbitrary file read vulnerability exists in the TRS WAS of TORS Information Technology Co. that can be exploited by an attacker to obtain sensitive information...

Logic Flaw Vulnerability in Stone Technology's Online Exam System

Stone Network Technology Service Center focuses on the construction of Internet platforms, web application development, innovation-led to provide customers with stable and reliable solutions. Stone Technology online examination system has a logic flaw vulnerability, attackers can use the...

WARNING: Hackers Install Secret Backdoor on Thousands of Microsoft SQL Servers

Cybersecurity researchers today uncovered a sustained malicious campaign dating back to May 2018 that targets Windows machines running MS-SQL servers to deploy backdoors and other kinds of malware, including multi-functional remote access tools RATs and cryptominers. Named "Vollgar " after the...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28018)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Mcms has a file upload vulnerability (CNVD-2020-27934)

Mcms is a web site building system of MINGFEI TECHNOLOGY CO. Mcms suffers from a file upload vulnerability that can be exploited by an attacker to gain server administrator privileges...

Extreme Office 2019 suffers from a memory corruption vulnerability (CNVD-2020-28022)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Extreme Office 2019 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

XSS Vulnerability in Website Building System of Yuege Network Technology Co.

Foshan Yuege Network Technology Co., Ltd. focuses on the development of small and medium-sized enterprise website construction and services, is committed to the domestic enterprise marketing website building service brand. Currently serves more than 3200 enterprises. Yuege Networks Technology Co....

Changsha Tianxin District Bin.com Network Technology Service Department's Website Building System Exists SQL Injection Vulnerabilities

Changsha Tianxin District Binnet Network Technology Service Department is a company engaged in corporate website construction, website promotion and other projects. Changsha Tianxin District Bin.com Network Technical Services Department website building system has a SQL injection vulnerability,...

Security Bulletin: A security vulnerability has been identified in IBM SDK, Java Technology shipped with IBM Maximo Asset Management (CVE-2020-2654)

Summary CVE-2020-2654 was disclosed as part of the January 2020 Critical Patch Update. Java is used by Maximo Asset Management, Maximo Asset Management Essentials, Maximo Asset Management for Energy Optimization, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM i

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition and IBM® Runtime Environment Java™ used by IBM i. IBM i has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-2604 DESCRIPTION: An unspecified vulnerability in Java SE could allow an unauthenticated...

Micro Focus Service Manager Automation SQL Injection Vulnerability

Micro Focus Service Manager is a suite of service desk software from Micro Focus UK. The software supports the deployment of a comprehensive IT service management ITSM system and standardizes management processes. A SQL injection vulnerability exists in Micro Focus SMA. The vulnerability stems fr...

Tokyo Olympics Postponed, But 5G Security Lessons Shine

The 2020 Summer Olympics in Tokyo were officially postponed this week amid the ongoing, pandemic spread of the coronavirus that causes COVID-19. The Games will be moved to 2021, but in the meantime, technological innovation around the event will continue. More specifically, postponed or not, the...

Security Bulletin: Security: A vulnerability in IBM Java Runtime affect Financial Transaction Manager for ACH Services (CVE-2019-4732)

Summary There is vulnerability in IBM® Runtime Environment Java™ Version 8 used by Financial Transaction Manager for ACH Services. Financial Transaction Manager for ACH Services FTM ACH has addressed the applicable CVE.brIf you run your own Java code using the IBM Java Runtime delivered with this...

Web exhibition PHP foreign trade enterprise website red style has SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and WebSphere Message Broker

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 7.1.4.10 and IBM® Runtime Environment Java™ Versions 7.0.10.10 and 7.1.4.10 used by IBM Integration Bus and WebSphere Message Broker. These issues were disclosed as part of the IBM Java SDK updates in Jul 201...