Weak Password Vulnerability in Green Alliance NF Next Generation Firewalls

NF Next-Generation Firewall is an enterprise-level next-generation border security product developed by Lvmeng Technology on the basis of the latest generation of 64-bit multi-core hardware platform, adopting the latest application-layer security protection concepts, and combining advanced...

Weak Password Vulnerability in Bright Diamond IDS Networked Digital Signage Management System

Bright Diamond Technology is a technology innovation enterprise specializing in intelligent commercial hardware solutions, providing cost-effective turnkey solutions for customers. A weak password vulnerability exists in Bright Diamond's IDS Networked Digital Signage Management System, which can ...

Traccar has a weak password vulnerability

Traccar is an open source GPS tracking system. Traccar suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in OLYM of Shenzhen Aolian Technology Co.

Shenzhen AOLINK Information Security Technology Co., Ltd "AOLINK" for short started in 2002, is a security enterprise integrating algorithm development, product research and development, solution realization, standard formulation and forward-looking technology research. OLYM has a weak password...

Inadequate Encryption Strength

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution...

GHSA-J239-4GQG-5J54 Inadequate Encryption Strength

Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution...

Exploit for Improper Access Control in Elasticsearch

欢迎各位大佬提BUG,当前版本 AssetScanV1.3 周期 初版：2019年11月28日 V1.0初版编写完成 修改1：2019年12月02日 感谢Shadow·J反馈kali下文件导入异常 修改2：2019年12月03日 V1.1发布，新增ARP存活检测（回滚，测bug） 修改3：2019年12月04日 V1.2发布，修复漏洞脚本异常，修复weblogic脚本 修改4：2019年12月05日 V1.2修改，感谢sevck提供设计思路以及代码不规范问题 修改5：2019年12月05日 V1.2修改，修复IP数据处理异常 修改6：2019年12月19日...

WellCMS 代码问题漏洞

WellCMS is an open source with a billion load, tend to mobile, lightweight, with ultra-fast response ability of high load CMS, is a large amount of data, high concurrency access to the site's best choice of light CMS. has a safe, efficient, stable, ultra-fast speed, super load characteristics. A...

Weak Password Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group

Founded on August 30, 1985, Skyrise Technology Group, or "Skyrise" for short, is a leading provider of network security, big data and security cloud services in China. A weak password vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group, which can be...

Weak Password Vulnerability in Solarsys Marketing Routing System of Beijing Oriental Gosun Information Technology Co.

Oriental Gosun is a leading Chinese technology company integrating hardware production and platform operation, focusing on commercial Wi-Fi and media services, developing and providing localized commercial Wi-Fi solutions. A weak password vulnerability exists in the Solarsys marketing routing...

Weak Password Vulnerability in Mixcall Seat Management Center of Shenzhen ShenHaiJie Technology Co.

SHEN ZHEN SINGHEAD TECH CO. LTD. is a high-tech enterprise focusing on the research, development, manufacturing and sales of contact center and converged communication products with communication as the core. SHENZHEN SINGHEAD TECH CO .,LTD. has a weak password vulnerability in the Mixcall agent...

DRUPAL-CONTRIB-2021-011

Open Social is a Drupal distribution for online communities. The included social\magic\login module doesn't sufficiently validate magic login URLs for user accounts. The lack of validation makes it possible for an adversary to forge valid login URLs and login to such an account. This vulnerabilit...

Weak Password Vulnerability in Shengxinta Internet Behavior Management

Shenzhen Xinta Technology Co., Ltd. is a security technology company that specializes in product development. Shengxinta Internet Behavior Management has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in Huazhou Private Cloud-CDN Live Streaming Acceleration Server

Shenzhen Huashimida Information Technology Co., Ltd. is a smart hotel IT service provider. A weak password vulnerability exists in the Huashi Private Cloud-CDN live streaming acceleration server, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in BigAnt Admin of Hangzhou Aipu Software Co.

BigAnt is a leading brand of domesticated enterprise instant messaging software for e-government. Ltd. BigAnt Admin suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in BDCOM Internet Behavior Management and Audit System

Shanghai Boda Data Communication Co., Ltd. is a high-tech enterprise integrating R&D, production and sales. BDCOM Internet Behavior Management and Audit System suffers from a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in Crocus

Crocus is an energy data analytics platform. Crocus suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

CVE-2021-25641

Each Apache Dubbo server will set a serialization id to tell the clients which serialization protocol it is working on. But for Dubbo versions before 2.7.8 or 2.6.9, an attacker can choose which serialization id the Provider will use by tampering with the byte preamble flags, aka, not following t...

Weak Password Vulnerability in Firewall DCFOS at Digital China Cloud Computing Information Technology Co.

Ltd. is a professional company with independent network and cloud brand and intellectual property rights under Digital China Group, and is a network and cloud equipment and solution provider involved in IPv6. A weak password vulnerability exists in DCFOS of Digital China Beijing CloudTech...

Debian: Security Advisory (DLA-2668-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...