CVE-2021-28269

Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions...

Design/Logic Flaw

Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions...

CVE-2021-28269

Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions...

CVE-2021-28269

CVE-2021-28269 (Soyal 701Client 9.0.1) describes an elevation-of-privileges vulnerability caused by insecure file permissions on client.exe, granting the Authenticated Users group Full permissions. Affected versions include 9.0.1 (190410, 190115). The issue enables a simple authenticated user to ...

Information leakage vulnerability in the nursing performance management system of Hangzhou Yunzai Information Technology Co.

The Nursing Performance Management System establishes a scientific personnel management model, an education and training model, a performance appraisal model, and a hierarchical management model to guide the scientific allocation of hospital human resources. There is an information leakage...

Weak Password Vulnerability in RM1800-35(V3) of Mapletree Technology Co.

RM1800-35V3 is a router product from Mapletree Technology Co. The RM1800-35V3 from MyPlanet Technologies Co., Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Digital Production Management System of Weihang Haojian Technology (Shenzhen) Co.

Weihang Haojian Technology Shenzhen Co., Ltd. is a pure software enterprise focusing on the research and development and promotion of the application of graphic technology and intelligent informatization software products, which integrates scientific research, development, sales, consulting and...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33391)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...

Command Execution Vulnerability in WeCenter of Anhui Simplify Information Technology Co.

WeCenter is an open source program for building knowledge communities. Anhui Simplify Information Technology Co., Ltd WeCenter has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Soyal Technology 701Client 安全漏洞

SOYAL Soyal Technology 701Client is a hardware device from China's Moshu Information SOYAL. A toilet alarm. A security vulnerability exists in Soyal Technology 701Client 9.0.1 that stems from insecure privileges...

SQL Injection Vulnerability in File Server Configuration Management System of UFIDA Network Technology Co.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in the File Server Configuration Management System of UFIDA Network Technology Co., Ltd. that can be exploited by...

Command Execution Vulnerability in WeCenter of Anhui Simplify Information Technology Co. Ltd (CNVD-2021-33411)

WeCenter is an open source program for building knowledge communities. Anhui Simplify Information Technology Co., Ltd WeCenter has a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Weak password vulnerability in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co.

Beijing Tianrongxin Technology Co., Ltd. is a leading provider of network security, big data and cloud services in China. A weak password vulnerability exists in TOPSEC TOS WEB ADMINISTRATOR of Beijing Tianrongxin Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Denial of Service Vulnerability in Tenda AC11 (CNVD-2021-33392)

AC11 is Shenzhen Jixiang Tengda Technology Co., Ltd. launched a special for large households to create suitable for 200 megabytes and above fiber optic home use of dual-band wireless router. A denial of service vulnerability exists in the Tenda AC11, which can be exploited by an attacker to cause...

Flying FishStar Home Smart Route suffers from a logic flaw vulnerability (CNVD-2021-34435)

Founded in 2002, Chengdu Flying Fish Star Technology Co., Ltd. is a high-tech enterprise focusing on product innovation and R&D in digital communication industry and Internet of Things industry. Flying Fish Star Home Intelligent Routing has a logic flaw vulnerability that can be exploited by...

Defending against cryptojacking with Microsoft Defender for Endpoint and Intel TDT

Cryptocurrency mining—once considered no more than a nuisance, a relatively benign activity that was a drain on machine resources—has been on the rise in recent years. This increase in cryptocurrency mining activity is driven by the increasing value of cryptocurrencies like Bitcoin, the growth in...

Defending against cryptojacking with Microsoft Defender for Endpoint and Intel TDT

Cryptocurrency mining—once considered no more than a nuisance, a relatively benign activity that was a drain on machine resources—has been on the rise in recent years. This increase in cryptocurrency mining activity is driven by the increasing value of cryptocurrencies like Bitcoin, the growth in...

SQL Injection Vulnerability in Shipping 100 Virtual Goods Auto-Shipping System of Zibo Shining Network Technology Co. Ltd (CNVD-2021-34231)

Shipping 100 virtual goods automatic shipping system is a powerful virtual goods automatic shipping system. A SQL injection vulnerability exists in Ship100 Virtual Goods Auto Shipment System, which can be exploited by attackers to obtain sensitive information from the database...

FBI-DHS-CISA Joint Advisory on Russian Foreign Intelligence Service Cyber Operations

The Federal Bureau of Investigation FBI, Department of Homeland Security, and CISA have released a Joint Cybersecurity Advisory CSA addressing Russian Foreign Intelligence Service SVR cyber actors—also known as Advanced Persistent Threat 29 APT 29, the Dukes, CozyBear, and Yttrium—continued...

File Upload Vulnerability in Everlab-Catalog Distributor Management Backend of Beijing Kubaza Information Technology Co.

Beijing Cobazaar Information Technology Co., Ltd. is a high-tech enterprise specializing in network software development and services. Beijing Cobazaar Information Technology Co., Ltd. has a file upload vulnerability in its Everlab-Catalog reseller management backend that can be exploited by an...