File Upload Vulnerability in Weilian Technology WiSCADA

WiSCADA industrial configuration software is a 3D industrial configuration software product that supports Windows, Android and IOS cross-platform. A file upload vulnerability exists in Weilian Technology WiSCADA. An attacker can exploit the vulnerability to upload a webshell and gain server...

SQL Injection Vulnerability in Tanaosoft Towel Textile ERP System

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. A SQL injection vulnerability exists in the Tanaosoft Towel Textile ERP system, which ca...

Logic Flaw Vulnerability in InoTouchEditor of Suzhou Huichuan Technology Co.

InoTouch Editor is a professional HMI programming software. A logic flaw vulnerability exists in InoTouchEditor of Suzhou Huichuan Technology Co. An attacker can exploit the vulnerability to obtain plaintext passwords and then read protected private data in the project...

SQL Injection Vulnerability in Production Management Software System of Jiangsu Hans Future Information Technology Co.

Jiangsu Hans Future Information Technology Co., Ltd, formerly known as "Huai'an Qixi Software Co., Ltd", was founded in 2009, is a technology-based enterprise mainly engaged in software development and sales. There is a SQL injection vulnerability in the production management software system of...

File uploading vulnerability in the smart water information management platform

Huatech Digital Technology Co., Ltd. formerly Shanda Luneng Information Technology Co., Ltd. was jointly invested and established by Shandong University and Luneng Group in December 2000, which is now subordinate to Shandong Province State-owned Assets Supervision and Administration Commission...

SolarWinds Hack – US officially Blames Russian Intel Agency Hackers

By Waqas The US has also revealed that 6 Russian technology firms were involved in developing tools that played a vital role in the SolarWinds hack. This is a post from HackRead.com Read the original post: SolarWinds Hack - US officially Blames Russian Intel Agency Hackers...

Chrome users, here’s how to opt out of the Google FLoC trial

Two weeks after Google launched a trial to replace run-of-the-mill online user tracking with new-fangled online user tracking, several companies and organizations have pushed back, criticizing the new technology—called FLoC—which is designed to respect peoples privacy more, as a detriment to user...

US Sanctions Russia and Expels 10 Diplomats Over SolarWinds Cyberattack

The U.S. and U.K. on Thursday formally attributed the supply chain attack of IT infrastructure management company SolarWinds with "high confidence" to government operatives working for Russia's Foreign Intelligence Service SVR. "Russia's pattern of malign behaviour around the world – whether in...

Unauthorized Access Vulnerability in Coal Mine Comprehensive Informatization Control Platform of Jiangsu Sanheng Technology Co.(CNVD-2021-30078)

Jiangsu Sanheng Technology Co., Ltd. is a joint-stock technology enterprise, the company's products mainly have three specialized directions: mine safety, mine communication, mine automatic control. The main systems are KJ70X coal mine safety monitoring system, KJ128A mine personnel management...

Information leakage vulnerability of coal mine comprehensive informationization management and control platform of Jiangsu Sanheng Technology Co.

Jiangsu Sanheng Technology Co., Ltd. is a joint-stock technology enterprise, the company's products mainly have three specialized directions: mine safety, mine communication, mine automatic control. The main systems are KJ70X coal mine safety monitoring system, KJ128A mine personnel management...

Unauthorized Access Vulnerability in Coal Mine Comprehensive Informatization Control Platform of Jiangsu Sanheng Technology Co.(CNVD-2021-30079)

Jiangsu Sanheng Technology Co., Ltd. is a joint-stock technology enterprise, the company's products mainly have three specialized directions: mine safety, mine communication, mine automatic control. The main systems are KJ70X coal mine safety monitoring system, KJ128A mine personnel management...

Weak Password Vulnerability in ER3200G2 System Management

The scope of business of Xinhua San Technology Co., Ltd. includes: technology development, technical services, technical consulting, transfer of achievements, production, sales: electronic products, software, data communication equipment, broadband access equipment, network security equipment,...

File Upload Vulnerability in Webzine Publishing System of Beijing Magtech Technology Development Co.

Beijing Magtech Science &Techology Development Co.Ltd was founded in March 1999, is a high-tech company engaged in software development, system integration. A file upload vulnerability exists in Beijing Magtech Science &Techology Development Co. Ltd.'s webzine publishing system, which can be...

Logic Flaw Vulnerability in Vigor Series Products

Shanghai Juyi Technology Development Co., Ltd, Legal Representative: Wang Nan, Registered Capital: 1,000,000 yuan, Address: JT1225, Room 2201, No. 888, Moyu South Road, Anting Town, Jiading District, Shanghai, Business Scope: General Items: technical services, technology development, technology...

Unauthorized Access Vulnerability in Ziggy's Bastion Machine

Zhejiang Qiji Technology Co., Ltd. is a company mainly engaged in computer hardware and software, network products, technology development and other projects. An unauthorized access vulnerability exists in Qiji Fortress, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Netnifty Security Gateway

Beijing Netnifty Information Technology Co., Ltd. was renamed from Lenovo Netnifty Technology Beijing Co., Ltd. which was formerly known as Lenovo Group's Information Security Division. A command execution vulnerability exists in the Netnifty Security Gateway, which can be exploited by attackers ...

Unauthorized Access Vulnerability in the Human Evidence Rubik's Cube Management System

Human ID Magic is a citizen's personal information approval software, using advanced face recognition count and fingerprint comparison technology, can be directly in the field to quickly compare the real person with the side of the document information, real-time uploading database, to provide...

SQL Injection Vulnerability in Human Evidence Rubik's Cube Management System

Human ID Magic is a citizen's personal information approval software, using advanced face recognition count and fingerprint comparison technology, can be directly in the field to quickly compare the real person with the side of the document information, real-time uploading database, to provide...

CVE-2021-27096

NTFS Elevation of Privilege Vulnerability...

Hacking Operational Technology for Defense: Lessons Learned From OT Red Teaming Smart Meter Control Infrastructure

High-profile security incidents in the past decade have brought increased scrutiny to cyber security for operational technology OT. However, there is a continued perception across critical infrastructure organizations that OT networks are isolated from public networks—such as the Internet. In...