File Upload Vulnerability in IPTV Business Management System of Shenzhen Zichen Video Technology Co.

Ltd. is a wholly-owned subsidiary of Beijing Zichen Pegasus Technology Co., Ltd. and is committed to providing a new generation of 4K ultra-high-definition audio-visual edge computing and so on for hotels, hospitals, communities, apartments, schools and enterprises and institutions. There is a fi...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-51287)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in Network Video Surveillance System of Tianmai Technology

Zhengzhou Tianmai Technology Co., Ltd. was founded in 2004, is located in Zhengzhou City, National High-tech Industrial Development Zone, is specializing in public transportation intelligent system solutions provider, is the "city intelligent bus solutions" and "3G/4G video, Beidou/GPS monitoring...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-51289)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-51290)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Geutebruck instantrec Remote Command Execution

This module exploits a buffer overflow within the 'action' parameter of the /uapi-cgi/instantrec.cgi page of Geutebruck G-Cam EEC-2xxx and G-Code EBC-21xx, EFD-22xx, ETHC-22xx, and EWPC-22xx devices running firmware versions == 1.12.0.27 as well as firmware versions 1.12.13.2 and 1.12.14.5...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-51288)

DocuCom PDF Reader is Beijing Zhenan Xinyu Technology Co., Ltd. developed pdf-related products. A binary vulnerability exists in DocuCom PDF Reader, which can be exploited by attackers to cause a denial of service...

Bluetooth 安全漏洞

Bluetooth is a short-range wireless technology standard from the Bluetooth Special Interest Group SIG standards organization for exchanging data between fixed and mobile devices over short distances using UHF radio waves in the ISM band from 2.402 GHz to 2.48 GHz, as well as for constructing...

Command Execution Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks (CNVD-2021-51332)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A command execution vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks, which can be exploited by...

Information Leakage Vulnerability in WEB Network Management System of Shenzhen WML Technology Co.

Ltd. is a professional provider of total network solutions and smart home solutions. There is an information leakage vulnerability in the WEB network management system of Shenzhen WML Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. The PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks suffers from an arbitrary file download vulnerability, which can be...

Arbitrary File Deletion Vulnerability in qwadmin of Beijing Chave Network Technology Co.

qwadmin is a backend management system based on thinkphp with aceadmin template. Beijing Chave Network Technology Co. qwadmin exists arbitrary file deletion vulnerability, an attacker can use the vulnerability to delete arbitrary files...

SQL Injection Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...

Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group (CNVD-2021-51352)

Skyrise Technology Group is a leading provider of network security, big data and security cloud services in China. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group, which can be exploited by an attacker to gain control of a server...

Arbitrary File Download Vulnerability in NSYS Netnifty Second Generation Firewall of Shenzhen Netnifty Technology Co.

NSYS ACF, the second-generation firewall, is a new network security appliance designed for the application layer, capable of accurately identifying users, applications and content, with complete security protection capabilities, and able to comprehensively replace traditional firewalls with stron...

Unauthorized Access Vulnerability in Brickstream 3D of LitenTronics Technology (Shenzhen) Co.

Ltd. E tag is a solution provider in Shenzhen. Ltd. Brickstream 3D suffers from an unauthorized access vulnerability that can be exploited by attackers to gain unauthorized access to sensitive information and perform unauthorized operations...

File upload vulnerability in jeewms (CNVD-2021-51414)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms file upload vulnerability , attackers can upload malicious files through the vulnerability , control the server...

SQL injection vulnerability in jeewms (CNVD-2021-51413)

jeewms is led by Linglu Valley Technology open source project , JAVA-based warehouse management system support for self- and third-party , including PDA side and WEB side . jeewms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

Arbitrary File Download Vulnerability in iOffice Hospital Edition

hereinafter referred to as: Redfan Technology is one of the top ten military industrial groups - China State Shipbuilding Corporation under the Guangzhou Shipbuilding International Company Limited Holdings of high-tech enterprises. iOffice Hospital Edition exists arbitrary file download...

Ricon Industrial Cellular Router S9922XL - Remote Command Execution Exploit

Exploit Title: Ricon Industrial Cellular Router S9922XL - Remote Command Execution RCE Exploit Author: LiquidWorm Vendor Homepage: https://www.riconmobile.com !/usr/bin/env python3 -- coding: utf-8 -- Ricon Industrial Cellular Router S9922XL Remote Command Execution Vendor: Ricon Mobile Inc...