CHIYU TCP/IP Converter devices - CRLF injection

Exploit Title: CHIYU TCP/IP Converter devices - CRLF injection Date: May 31 2021 Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, and BF-450M TCP/IP Converter device...

Korenix CSRF / Backdoor Accounts / Command Injection / Missing Authentication Vulnerabilities

Multiple Korenix products are affected by unauthenticated device administration, backdoor accounts, cross site request forgery, unauthenticated tftp actions, and command injection vulnerabilities. Products affected include JetNet 5428G-20SFP, JetNet 5810G, JetNet 4706F, JetNet 4706, JetNet 4706,...

Command Execution Vulnerability in ofcms v1.1.4

OFCMS is a content management system developed based on java technology. OFCMS v1.1.4 suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Denial of Service Vulnerability in Various AC Routers of Shenzhen Jixiang Tengda Technology Co. Ltd (CNVD-2021-41102)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Various AC routers have denial-of-service vulnerabilities, which can be exploited by...

Unauthorized Access Vulnerability in Multiple Products of Innotek Laser Technology Co.

Founded in 2011, INNOLEDGE LASER CORPORATION is a national high-tech enterprise, headquartered in Science and Technology Park, Nanshan District, Shenzhen City, China, focusing on the research and development of lasers in the field of microprocessing, production, sales and customized microprocessi...

Denial of Service Vulnerability in Various AC Routers of Shenzhen Jixiang Tengda Technology Co. Ltd (CNVD-2021-41099)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Various AC routers have denial-of-service vulnerabilities, which can be exploited by...

Korenix CSRF / Backdoor Accounts / Command Injection / Missing Authentication

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Critical Vulnerabilities product: Multiple Korenix Technology products: Korenix: JetNet 5428G-20SFP, JetNet 5810G, JetNet 4706F, JetNet 4706, JetNet 4706, JetNet...

Binary Vulnerability in Various AC Routers of Shenzhen Jixiang Tengda Technology Co. Ltd (CNVD-2021-41106)

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd. a number of AC routers have a binary vulnerability that can be exploited by attackers to...

CHIYU TCP/IP Converter devices - CRLF injection Vulnerability

Exploit Title: CHIYU TCP/IP Converter devices - CRLF injection Exploit Author: sirpedrotavares Vendor Homepage: https://www.chiyu-tech.com/msg/msg88.html Software Link: https://www.chiyu-tech.com/category-hardware.html Version: BF-430, BF-431, and BF-450M TCP/IP Converter devices - all firmware...

Denial of Service Vulnerability in Various AC Routers of Shenzhen Jixiang Tengda Technology Co.

Shenzhen Jixiang Tengda Technology Co., Ltd. is a high-tech enterprise integrating independent research and development, production and sales of network equipment. Shenzhen Jixiang Tengda Technology Co., Ltd Various AC routers have denial-of-service vulnerabilities, which can be exploited by...

Microhome Software Technology (Hangzhou) Co., Ltd. website builder system suffers from an arbitrary file read vulnerability

Microsoft Technology Hangzhou Co., Ltd. is a professional ECM Collaboration Management Software and BPM Business Process Management Software R & D and solution provider. There is an arbitrary file reading vulnerability in the website building system of Microhome Software Technology Hangzhou Co. A...

SQL Injection Vulnerability in Campus Intelligent Control of Shenzhen Magic Ball Technology Co.

Campus Smart Control is a combination of face recognition terminal, pass gate, face recognition algorithm, smart campus management system, education cloud platform, and interactive classroom system. Shenzhen Magic Ball Technology Co., Ltd Campus Smart Control has SQL injection vulnerability...

Command Execution Vulnerability in Night God Emulator of Beijing Multi-Point Online Technology Co.

Night God Emulator is a very useful mobile game simulator to play mobile games on PC. Beijing Multipoint Online Technology Co. Night God Emulator has a command execution vulnerability that can be exploited by an attacker to gain server control privileges...

File upload vulnerability in Guangxi Tianshou Network Technology Co.

Guangxi Tianhands Network Technology Co., Ltd. specializes in computer network information technology development and technical services, computer software technical consulting, technical services and technology transfer. Guangxi Tianshou Network Technology Co., Ltd. station building system there...

SQL Injection Vulnerability in the Website Building System of Beijing Bolehoo Technology Co. Ltd (CNVD-2021-40228)

Beijing Bolehoo Technology Co., Ltd, started in 2007 is a integration of planning, design, production, technology development in one of the station-building company. There is a SQL injection vulnerability in the website building system of Beijing Bleihoo Technology Co., Ltd, which can be exploite...

WYAOS Internet Behavior Management has Information Leakage Vulnerability

As a leading supplier of network equipment and smart home product solutions in China, Shenzhen WayOS Technology Co. There is an information leakage vulnerability in WYAOS Internet Behavior Management IBM, which can be exploited by attackers to obtain sensitive information...

XSS Vulnerability in Shop7z Online Shopping System of Shijiazhuang Zhenghong Network Technology Co.

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shijiazhuang City, Zhenghong Network Technology Co., Ltd Shop7z online shopping system XSS vulnerability, attackers can use the vulnerability to obtain...

Flying FishStar Enterprise Intelligent Internet Behavior Management System suffers from information leakage vulnerability (CNVD-2021-41503)

Chengdu Flying Fish Star Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network usage through innovative technologies, and cooperating with users to create an intelligent and...

Weak Password Vulnerability in TGS-AGW Gateway of Guangzhou Tongjucheng Electronic Technology Co.

Guangzhou Tongjucheng Electronic Technology Co., Ltd. is a company focusing on the "TGS-AGW" series of security gateway products with independent intellectual property rights, stable performance, powerful functions, through the authoritative certification of public information network security; t...

The Misaligned Incentives for Cloud Security

Russias Sunburst cyberespionage campaign, discovered late last year, impacted more than 100 large companies and US federal agencies, including the Treasury, Energy, Justice, and Homeland Security departments. A crucial part of the Russians success was their ability to move through these...