File Containment Vulnerability in Tian Yue Network Security Audit System of Qixing Information Technology Group Co.

Providence Peak Network Security Audit System is a compliance management system for fine-grained auditing of network operation behaviors in business environments. A file inclusion vulnerability exists in the Tianyue Network Security Audit System of Qixing Information Technology Group Company...

Unauthorized Access Vulnerability in LiveNVR of Anhui Green Persimmon Information Technology Co. Ltd (CNVD-2023-77604)

Anhui Green Persimmon Information Technology Co., Ltd. is a company whose business scope includes: computer hardware and software development and sales, technical services, technical consulting, technology transfer; web page design; design, installation and maintenance of network equipment;...

Denial of service

Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network...

Unauthorized Access Vulnerability in LiveSMS of Anhui Green Persimmon Information Technology Co.

Anhui Green Persimmon Information Technology Co., Ltd. is a company whose business scope includes: computer software and hardware development and sales, technical services, technical consulting, technology transfer; web page design; Internet information services and so on. There is an unauthorize...

Unauthorized Access Vulnerability in LiveNVS of Anhui Green Persimmon Information Technology Co.

LiveNVS is a solution dedicated to centralized management of LiveNVRs.... Anhui Green Persimmon Information Technology Co. LiveNVS has an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2022-23382

Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network...

Unauthorized Access Vulnerability in LiveQing of Anhui Green Persimmon Information Technology Co.

LiveQing Aoki video streaming service solution. An unauthorized access vulnerability exists in LiveQing of Anhui Green Persimmon Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. A command execution vulnerability exists in the DSS Safe City System of Zhejiang Dahua Technology Company Limited, which can be exploited by an attacker to execute arbitrary commands...

Smart chastity device exposes sensitive user data

A security breach or piece of inadvertent exposure can be a devastating thing, not just for the company impacted but also the people whose data is stolen or exposed to the world. The usual roll-call of "name, address, phone number and card details" is bad enough. If such things are tied to...

CVE-2023-4034

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection.This issue affects Smartrise Document Management System: before Hvl-2.0...

CVE-2023-4034

CVE-2023-4034 affects Digita Information Technology Smartrise Document Management System prior to Hvl-2.0. The flaw is an SQL Injection due to improper neutralization of special elements in SQL commands, enabling likely high-impact abuse (CVSSv3.1: 9.8, CRITICAL; Confidentiality/Integrity/Availab...

CVE-2023-4034 SQLi in Smartrise Document Management System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0...

CVE-2023-4034 SQLi in Smartrise Document Management System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0...

Gcore Thwarts 500 Million PPS DDoS Attack on Gaming Company

By Owais Sultan Technology enhances our lives, but it also leaves us vulnerable to unprecedented cyber threats. This is a post from HackRead.com Read the original post: Gcore Thwarts 500 Million PPS DDoS Attack on Gaming Company...

Security Bulletin: IBM SDK, Java Technology Edition, Security Update August 2023

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, 8 that is used by Rational Application Developer®. These issues were disclosed as part of the IBM Java SDK updates up to August 2023. IBM 8 SR8 FP5 1.8.0371. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IB...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Business Service Manager (CVE-2022-40609)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

Digita Information Technology Smartrise Document Management System SQL Injection Vulnerability

Digita Information Technology Smartrise Document Management System is a document management system from Digita Information Technology, Turkey. A SQL injection vulnerability exists in Digita Information Technology Smartrise Document Management System Hvl-2.0 prior versions, which stems from...

Security Bulletin: CVE-2022-40609 may affect Java Technology Edition used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary CVE-2022-40609 vulnerability in Java Technology Edition could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw by sending specially-crafted data. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Editi...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary Multiple vulnerabilities were disclosed in the Oracle April 2023 Quarterly CPU Update. Vulnerability Details CVEID:CVE-2023-21930 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition related to the JSSE component could allow an unauthenticated...