Arbitrary File Download Vulnerability in Built-in Reports of Renton Network Security Management System

Renzi Network Technology Co., Ltd. was founded in May 2000, and its business covers network security, information security, public security, network resource security, industrial internet security and many other fields, etc. etc. An arbitrary file download vulnerability exists in the built-in...

Arbitrary File Download Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group

Founded on August 30, 1985, Skyrise Technology Group, or "Skyrise" for short, is a leading provider of network security, big data and security cloud services in China. An arbitrary file download vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group. An...

[eBook] 7 Signs You Might Need a New Detection and Response Tool

It's natural to get complacent with the status quo when things seem to be working. The familiar is comfortable, and even if something better comes along, it brings with it many unknowns. In cybersecurity, this tendency is countered by the fast pace of innovation and how quickly technology becomes...

Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system with command execution vulnerabilities

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system there is a command execution vulnerability , attackers can...

SQL Injection Vulnerability in netcall of Hangzhou Xinzhongda Technology Co.

netcall is an instant messaging software developed by New CUHK based on the open source communication protocol xmpp. A SQL injection vulnerability exists in netcall of Hangzhou Xinzhongda Science and Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the...

Command Execution Vulnerability in Various Cameras of Shenzhen Qiaoan Technology Co.

Ltd, founded in 2010 in Shenzhen, is a "Qiaoan" as the core brand, mainly engaged in video security smart home product development, production, marketing, service in one of the national high-tech enterprises. Ltd. A number of cameras exist command execution vulnerability, attackers can use the...

primion Technology AG Secure 8 SQL注入漏洞

primion Technology AG Secure 8 is an access control solution from the Spanish company primion Technology AG. It is designed to control the access of people and vehicles to various locations. Secure 8 suffers from an SQL injection vulnerability that stems from Secure 8 Evalos not properly validati...

XSS Vulnerability in Cyberdocuments (CNVD-2021-45738)

Ltd. formerly known as Anhui Zhongke Daxunfei Information Technology Co., Ltd, the company is headquartered in Hefei, was founded on December 30, 1999, and was changed to KD Xunfei Co., Ltd. on April 18, 2014, which specializes in intelligent voice and language technology research, software and...

74CMS SQL Injection Vulnerability (CNVD-2021-43390)

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the x parameter of ajaxofficebuilding.php...

Arbitrary File Read Vulnerability in DSKMS

DSKMS is a professional content payment system tailored for enterprise customers by Changsha Deshaun Network Technology Co. DSKMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

VeryFitPro 3.2.8 Insecure Transit

Trovent Security Advisory 2105-01 Unencrypted cleartext transmission of sensitive information Overview Advisory ID: TRSA-2105-01 Advisory version: 1.0 Advisory status: Public Advisory URL: https://trovent.io/security-advisory-2105-01 Affected product: VeryFitPro Android mobile application...

Weak Password Vulnerability in Streaming Media Encoder Professional Edition of Hefei Duck Information Technology Co.

Hefei Duck Information Technology Co., Ltd. is a company focusing on the research of audio and video compression, transmission and analysis algorithms. A weak password vulnerability exists in Hefei Tuduck Information Technology Limited Streaming Encoder Professional Edition, which can be exploite...

Weak Password Vulnerability in 360 Skywall's New Generation Intelligent Firewalls

360 Skywall New Generation Intelligent Firewall is a new generation firewall independently developed by NetShen Information Technology Beijing Co. A weak password vulnerability exists in the 360 Tinti New Generation Intelligent Firewall, which can be exploited by attackers to obtain sensitive...

74CMS SQL Injection Vulnerability (CNVD-2021-43380)

74CMS is a recruitment system developed by Taiyuan Xunyi Technology Co., Ltd. based on ThinkPHP framework. A SQL injection vulnerability exists in 74CMS version 3.2.0. An attacker can use this vulnerability to inject SQL statements via the query parameter of plus/ajaxcommon.php...

Arbitrary File Download Vulnerability in Secure Router of Riseconda Technology Development Co.

Focusing on the field of fiber optic broadband access, Riseconda Technology Development Co., Ltd. is committed to the convergence of fiber optic technology, Ethernet technology and broadband access technology. An arbitrary file download vulnerability exists in the security router of Riseconda...

Arbitrary File Read Vulnerability in Fiberhome Network Behavior Audit System

Established in 1999, Fiberhome Communication Technology Co., Ltd. is currently the only scientific research and industrial entity integrating three strategic technologies in the field of optical communication in China. An arbitrary file read vulnerability exists in Fiberhome Network Behavior Audi...

SQL Injection Vulnerability in Medical Virtual Simulation Teaching Experiment Platform of Shanghai Dream Road Digital Technology Co.

Medical virtual simulation teaching experiment platform is a virtual reality system with computer virtual reality and digital simulation technology as the core, biosimulation engine, processing factor database, virtual environment interface and other technologies as the support. Shanghai Dream Ro...

File Upload Vulnerability in the Supervisory Platform of Zhongke Nintu Technology Jiangsu Co.

Nanjing Nintu Information Technology Co., Ltd now renamed as Zhongke Nintu Technology Jiangsu Co., Ltd was founded in August 2009, is a software development and service-oriented enterprise with the technical background of gis laboratory of Hohai University. Its product supervision platform is...

Weak password vulnerability in Hikvision security access gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. A weak password vulnerability exists in the Hikvision security access gateway. An attacker can utilize the vulnerability to log into the backend and obtain sensitive information...

Security Bulletin: A security vulnerability has been identified in IBM® SDK, Java™ Technology Edition shipped with IBM Tivoli Business Service Manager (CVE-2021-2161)

Summary IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin. Vulnerability Details Refer to the security bulletins...