Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03427)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

SQL Injection Vulnerability in Website Building System of Guangzhou Netsky Network Technology Co.

Guangzhou net day network technology limited company long-term service in the Internet information technology high-tech position, is committed to engaging in various industries in the enterprise company's e-commerce, website construction and website promotion, corporate publicity, software...

Extreme Office suffers from a memory corruption vulnerability (CNVD-2021-03428)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A memory corruption vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Extreme Office has a code execution vulnerability

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. A code execution vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Extreme Office suffers from an array out-of-bounds read vulnerability (CNVD-2021-03429)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. An array out-of-bounds read vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

Extreme Office suffers from an array out-of-bounds read vulnerability (CNVD-2021-03430)

Extreme Office is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. An array out-of-bounds read vulnerability exists in Extreme Office. An attacker can exploit this vulnerability to cause the program to crash...

CVE-2020-26294

Vela is a Pipeline Automation CI/CD framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can use Sprig's env function to retrieve...

Code injection

Vela is a Pipeline Automation CI/CD framework built on Linux container technology written in Golang. In Vela compiler before version 0.6.1 there is a vulnerability which allows exposure of server configuration. It impacts all users of Vela. An attacker can use Sprig's env function to retrieve...

CVE-2020-26294

Vela compiler before version 0.6.1 allows exposure of server configuration via Sprig's env function in templates. The vulnerability affects the Vela server/component and enables an attacker to retrieve configuration information, exposing sensitive data. The issue has been fixed in version 0.6.1; ...

Login Bypass Vulnerability in Charging Pile Operation Management System of Shenzhen Crestec Technology Co.

Shenzhen Crestec Technology Co., Ltd. is a technology enterprise engaged in the research, development, manufacturing and sales of UPS uninterruptible power supply, server room integration, maintenance-free lead-acid batteries, inverter power supply. A login bypass vulnerability exists in the...

Directory Traversal Vulnerability in EQ Enterprise Management System of Guangzhou EQ Information Technology Co.

Guangzhou YiQuan Information Technology Co., Ltd. is an Internet SAAS provider specializing in online management software for small and medium-sized enterprises. A directory traversal vulnerability exists in the EQ Enterprise Management System of Guangzhou YiQuan Information Technology Co. An...

SQL Injection Vulnerability in the Anti-Desertion Platform of Zhejiang Dahua Technology Co. Ltd. for Medical Treatment Outside the Company (CNVD-2021-03460)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the anti-evasion platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to obtain sensitive information in...

Denial of Service Vulnerability in Fair Smart Antivirus 8

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. A denial of service vulnerability exists in Fair Smart Antivirus 8. An attacker can exploit the vulnerability to cause a computer crash BSOD via a constructed program...

Weak Password Vulnerability in Media Player of Zhejiang YUV Technology Co.

Founded in 2011, Zhejiang Yusi Technology Co., Ltd Yusi is a global solution provider for public safety and intelligent transportation. A weak password vulnerability exists in the media player of Zhejiang YUV Technology Co. An attacker can exploit the vulnerability by entering the default passwor...

SQL Injection Vulnerability in Lionfish Community Group Buying System

The business scope of Xiamen Lionfish Network Technology Co., Ltd. includes: Internet of Things IoT technology services; Internet of Things IoT application services; Internet of Things IoT equipment manufacturing; and Internet of Things IoT equipment sales. Lionfish Community Group Buying System...

Shanghai Silverfox Information Technology Co., Ltd. website building system suffers from SQL injection vulnerabilities (CNVD-2021-01851)

Shanghai Silver Fox Information Technology Co., Ltd. business scope includes: engaged in computer technology, network technology in the field of technology development, technology transfer, technical services, technical consulting and so on. Shanghai Silver Fox Information Technology Co., Ltd...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01865)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

Falcon Terminal Security System V9.0 suffers from local elevation of privilege vulnerability

The business scope of Beijing Falcon Security Technology Co., Ltd. includes: technology promotion, technology development, technology service, technology consulting; sales of computers, software and auxiliary equipment, electronic products and so on. Falcon Terminal Security System V9.0 has a loc...

Lawsuit Claims Flawed Facial Recognition Led to Man’s Wrongful Arrest

Racial bias against non-white skin in facial recognition landed Nijeer Parks ten days in jail in 2019 after the technology falsely identified him as a shoplifting suspect, a new lawsuit says. It didn’t matter that he hadn’t been to the location of the crime, a Hampton Inn hotel in Woodbridge, New...

The Advantages and Risks of Serverless Computing

Organizations are increasingly embracing serverless computing for its convenience and cost-effectiveness. But many IT teams are blindly embracing this innovation in cloud technology without consulting their security peers. As a result, we can expect to see a growing number of cyber-attacks in thi...