CVE-2026-29840

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting XSS vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering...

CVE-2026-29840

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting XSS vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering...

PT-2026-27448

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting XSS vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering tags but fails to recursively remove dangerous event handlers in other HTML tags such as onerro...

$15 Billion Pig Butchering Scam Boss Chen Zhi Extradited to China

Billionaire Chen Zhi and associates Xu Ji Liang and Shao Ji Hui have been extradited to China. This exclusive report details the collapse of the Prince Group's global scam network, the seizure of $15 billion in Bitcoin, and the forced labour camps behind the billion-dollar pig butchering fraud...

ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion-Dollar Smishing, Android RATs & More

The online world is changing fast. Every week, new scams, hacks, and tricks show how easy it's become to turn everyday technology into a weapon. Tools made to help us work, connect, and stay safe are now being used to steal, spy, and deceive. Hackers don't always break systems anymore — they use...

CVE-2024-0649

A vulnerability was found in ZhiHuiYun up to 4.4.13 and classified as critical. This issue affects the function downloadnetworkimage of the file /app/Http/Controllers/ImageController.php of the component Search. The manipulation of the argument url leads to server-side request forgery. The attack...

ZhiCms Code Issues Vulnerabilities

ZhiCms is a professional buy-worthy system of ZhiCms community. ZhiCms 4.0 before the version of the code problem vulnerability, the vulnerability stems from app/plug/controller/giftcontroller.php in the existence of unknown parts, through the parameter mylike lead to deserialization...

Beijing Dawei Zhichuang Technology Co., Ltd.'s Intellectual Property Management System Has Logical Flaws and Vulnerabilities

Beijing Dawei Zhichuang Technology Co., Ltd. is a company whose business scope includes technology development, technology promotion, technology transfer, technology consulting and technology service in the field of computer software, hardware and electronic products. There is a logic flaw...

Logic flaws exist in the standard version of the mall system of Zhi Chang

Ltd. products are B2B2C multi-user mall system, O2O mall system, micro-distributor city system, cross-border e-commerce system, popular version of the mall system, WeChat multi-user small program system, WeChat small program mall system, WeChat small program group system, WeChat small program...

Logic Flaw Vulnerability in LJCMS of Beijing Liang Jing Zhi Cheng Technology Co.

LJCMS is a PHP+MYSQL based, free and open source enterprise website system. Beijing Liang Jing Zhi Cheng Technology Co., Ltd. LJCMS has a logic flaw vulnerability, attackers can exploit the vulnerability to overstep the authority to modify the harvesting address of others...

SQL Injection Vulnerability in ZhiCms ma***.php Page

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms ma.php page suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Command Execution Vulnerability in Jiu Fang Zhi Investment PC Client

Jiufang Wisdom Investment is a computerized stock speculation software. A command execution vulnerability exists in the Jiu Fang Zhi Investment PC client, which can be exploited by attackers to execute malicious code...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10174)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10169)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10173)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

ZhiCms V1.0.4 suffers from a command execution vulnerability (CNVD-2019-43081)

ZhiCms is an enterprise building system based on PHP and mysql technology. A code execution vulnerability exists in ZhiCms v1.0.4, which is due to the system failing to effectively filter input parameters. An attacker can exploit this vulnerability to write a Trojan horse and execute it to obtain...

ZhiCms v1.0.4 SQL Injection Vulnerability in Background gi***.php

ZhiCms is an enterprise building system based on PHP and mysql technology. ZhiCms v1.0.4 background gi.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

SQL Injection Vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated Management Platform

Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is a SQL injection vulnerability in Yinda Hui Zhi Anshu Yi Intelligent Integrated Management...

Information leakage vulnerability in Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform

Yinda Hui Zhi An School Easy Intelligent Comprehensive Management Platform is a comprehensive campus information management system, the business includes campus card, attendance, access and so on. There is an information leakage vulnerability in Yinda Hui Zhi An School Easy Intelligent Integrated...

XSS Vulnerability in the Online School System of Beijing Yi Zhi Lu Technology Co.

Ltd. is a high-tech enterprise focusing on the research and development of online education products and one-stop service of online education solutions. There is an xss vulnerability in the online school system of Beijing EZL Technology Co., Ltd. that can be exploited by attackers to inject...