Weak Password Vulnerability in DH-SD-6A9226F-HNI of Zhejiang Dahua Stock Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. Zhejiang Dahua Technology Co., Ltd DH-SD-6A9226F-HNI has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in WEB SERVICE of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in WEB SERVICE of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

in phpservermon/phpservermon

✍️ Description Insecure randomness errors occur when a function that can produce predictable values is used as a source of randomness in security-sensitive context. This code uses the rand function to generate "unique" identifiers for the receipt pages it generates. In this case the function that...

Weak Password Vulnerability in TamronOS IPTV System

TamronOS Tenglong.com was founded in 2008, is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. TamronOS IPTV system suffers from a weak password vulnerability, which can be exploited by an attacker to log...

Weak password vulnerability in remote access platform of Shenzhen Wheaton Information Technology Co.

Shenzhen Wheaton Information Technology Co., Ltd Wheaton for short is a company dedicated to providing government, enterprises and institutions with remote application centralized access solutions, VPN security interconnection solutions, core data security protection solutions and so on. There is...

Weak password vulnerability in Datang Telecom's AC centralized management platform (CNVD-2021-46909)

Ltd. is a high-tech enterprise held by the Institute of Telecommunications Science and Technology Datang Telecom Technology & Industry Group. Datang Telecom has formed four major industrial segments, namely, integrated circuit design, software and application, terminal design and mobile Internet....

Weak password vulnerability in DS-SAG200 of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the DS-SAG200 of Hangzhou Hikvision System Technology Co. that can be exploited by attackers to obtain sensitive information...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

Cross site scripting

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

CVE-2021-33347

CVE-2021-33347 affects JPress v3.3.0 and earlier. The issue is stored XSS originating from the template module and the tag management module, exploitable when a background login occurs via weak passwords. Impact is described as storage XSS with potential credential-related login context enabling ...

CVE-2021-33347

An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur...

Weak password vulnerability in SINDOH N600

Founded in 1960, Xindu Qingdao Office Systems Co., Ltd. is a multinational company specializing in the production of office automation equipment based on digital network. A weak password vulnerability exists in SINDOH N600, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co.

Ltd. is a company specializing in the research and development of video conference system hardware and software. A weak password vulnerability exists in the management system of the HIM base platform of Beijing Zhongchuang Vision Technology Co. Ltd, which can be exploited by attackers to obtain...

Weak Password Vulnerability in Polycom Device Management System

Founded in 1990, Polycom China is a global integrated collaborative communications company. It is a leading provider of high-quality audio and video conferencing systems and solutions. A weak password vulnerability exists in the Polycom device management system, which can be exploited by an...

The vulnerability of implementations of algorithms such as WPA, WPA2, and WPA3—standards for IEEE 802.11 communication—allows attackers to compromise the integrity of protected information.

The vulnerability of implementations of WPA, WPA2, and WPA3—standards for IEEE 802.11 communication—is related to insufficient encryption robustness. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

CVE-2021-32424

In TrendNet TW100-S4W1CA 2.3.32, due to a lack of proper session controls, a threat actor could make unauthorized changes to an affected router via a specially crafted web page. If an authenticated user were to interact with a malicious web page it could allow for a complete takeover of the route...

Weak Password Vulnerability in Chien Wang CRM Customer Management System

Thousand Wonders Software is a professional software developer. A weak password vulnerability exists in the Chivan CRM customer management system, which can be exploited by attackers to obtain sensitive information...

TrendNet TW100-S4W1CA 跨站请求伪造漏洞

The TrendNet TW100-S4W1CA is a four-port broadband router. A cross-site request forgery vulnerability exists in the TrendNet TW100-S4W1CA version 2.3.32. The vulnerability stems from a lack of proper session control. An attacker could exploit the vulnerability to make unauthorized changes to the...

Weak password vulnerability in KYOCERA ECOSYS M5520cdn

The ECOSYS M5520cdn is an all-in-one printer. A weak password vulnerability exists in the KYOCERA ECOSYS M5520cdn, which can be exploited by an attacker to obtain sensitive information...