Kami YI HOME Security Breach

Kami YI HOME is a webcam from Kami. A security vulnerability exists in Kami YI HOME prior to version 4.1.920231127, which originates from a vulnerability that allows remote attackers to execute arbitrary JavaScript code via the com.ants360.yicamera.activity.WebViewActivity component...

CVE-2023-47882

The Kami Vision YI IoT Android app (com.yunyi.smartcamera) up to version 4.1.9_20231127 is vulnerable to remote JavaScript execution via an implicit intent targeting com.ants360.yicamera.activity.WebViewActivity. Root cause is likely unsafe handling of WebView content invoked through implicit int...

Max Yi MaxBoard SQL Injection Vulnerability

Max Yi MaxBoard is a CMS Content Management System or web framework from Max Yi, Korea. It helps to make website creation and site management easier and can be easily and conveniently used to build the backend of applications.A SQL injection vulnerability exists in versions prior to Max Yi MaxBoa...

new packages: hunspell-yi

An update is available for hunspell-yi. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

Logic Flaw Vulnerability in Tengyi Sky Firewall v2

TengYi Network is an Internet service provider specializing in providing domestic and international anti-attack protection. A logic flaw vulnerability exists in Tengyi Sky Firewall v2, which can be exploited by attackers to obtain sensitive information...

File Upload Vulnerability in Easy Control World

Easy Control World is an automation monitoring and information management platform created by Beijing Jiushi Yi Automation Software Co. A file upload vulnerability exists in Easy Control World. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

File Upload Vulnerability in Easy Control World (CNVD-2021-33158)

Easy Control World is an automation monitoring and information management platform created by Beijing Jiushi Yi Automation Software Co. A file upload vulnerability exists in Easy Control World. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

Wuxi Yi Shang Technology Co., Ltd. website building system has SQL injection vulnerabilities

Ltd. is a network company that provides professional, perfect and comprehensive informatization services for small and medium-sized enterprises and business people through a network service platform. There is a SQL injection vulnerability in the website building system of Wuxi Yi Shang Technology...

SQL Injection Vulnerability in Website Building System of Xiamen E-Shang Network Technology Co.

Xiamen Yi Shang Network Technology Co., Ltd. is an IT company dedicated to enterprise e-commerce consulting and solutions and enterprise informationization services. Xiamen Ease of Business Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, an attacker ca...

XSS vulnerability in Linqing AYi Network Technology website building system

Linqing City, A Yi network technology is committed to website construction services. Linqing City, A easy network technology station building system there are XSS vulnerabilities, attackers can take advantage of the vulnerability to obtain sensitive information such as user cookies...

SQL injection vulnerability in Ar***.asp page of website building system of Wuxi Yi Shang Technology Co.

Wuxi Yi Shang Technology Co., Ltd. is a network planning and marketing enterprise. Ltd. building system Ar.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information database...

Xiamen Yi Shang Network Technology website building system SQL injection vulnerability

Xiamen Yi Shang Network Technology Co., Ltd. is one of the Internet application service providers; is a commitment to enterprise e-commerce consulting and solutions and enterprise information technology services, a professional IT company, with a number of products and services related to the...

CVE-2019-13953

An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy BLE authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage e.g., personal photos. An attacker can...

CVE-2019-13953

An exploitable authentication bypass vulnerability exists in the Bluetooth Low Energy BLE authentication module of YI M1 Mirrorless Camera V3.2-cn. An attacker can send a set of BLE commands to trigger this vulnerability, resulting in sensitive data leakage e.g., personal photos. An attacker can...

CVE-2019-13953

CVE-2019-13953 affects the BLE authentication module in the YI M1 Mirrorless Camera V3.2-cn. The vulnerability allows an attacker to bypass authentication by sending a sequence of BLE commands, enabling sensitive data leakage (e.g., personal photos) and the ability to control the camera to record...

XSS Vulnerability in the Online School System of Beijing Yi Zhi Lu Technology Co.

Ltd. is a high-tech enterprise focusing on the research and development of online education products and one-stop service of online education solutions. There is an xss vulnerability in the online school system of Beijing EZL Technology Co., Ltd. that can be exploited by attackers to inject...

Yi Technology Home Camera CRCDec Denial Of Service (CVE-2018-3935)

A denial of service vulnerability exists in the Yi Home Camera. Successful exploitation of this vulnerability could allow a remote attacker to allocate unlimited memory, resulting in denial of service...

Yi Technology Home Camera 27US Denial Of Service (CVE-2018-3928)

A denial of service vulnerability exists in the firmware update functionality of Yi Home Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system, creating a denial of service condition...

Yi Technology Home Camera cloudAPI SSID Code Execution (CVE-2018-3910)

A remote code execution vulnerability exists in Yi Home Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Yi Technology Home Camera Time Sync Code Execution (CVE-2018-3892)

A remote code execution exists in the time syncing functionality of Yi Home Camera. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...