🔵A SQL injection vulnerability exists in the website building system of Zhengzhou Langchuang Culture Communication Co., Ltd.
https://dailycve.com/sql-injection-vulnerability-exists-website-building-system-zhengzhou-langchuang-culture
https://dailycve.com/sql-injection-vulnerability-exists-website-building-system-zhengzhou-langchuang-culture
Dailycve
A SQL injection vulnerability exists in the website building system of Zhengzhou Langchuang Culture Communication Co., Ltd. | CVE
Details:
Zhengzhou Langchuang Culture Communication Co., Ltd., which is a domestic specialist network marketing service provider focused on seo marketing, sem marketing and social media marketing, is affiliated to Langchuang Network Marketing.
There…
Unilever CEO: "Employees will never return to the office five days a week"
#International
MORE DETAILS - https://undercodenews.com/unilever-ceo-employees-will-never-return-to-the-office-five-days-a-week/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/unilever-ceo-employees-will-never-return-to-the-office-five-days-a-week/14/01/2021/
The date of criticism was explained by WhatsApp, which declared an ultimatum.
#Updates
MORE DETAILS - https://undercodenews.com/the-date-of-criticism-was-explained-by-whatsapp-which-declared-an-ultimatum/14/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/the-date-of-criticism-was-explained-by-whatsapp-which-declared-an-ultimatum/14/01/2021/
🔵Ethereum Aleth denial of service vulnerability:
https://dailycve.com/ethereum-aleth-denial-service-vulnerability-0
https://dailycve.com/ethereum-aleth-denial-service-vulnerability-0
Dailycve
Ethereum Aleth denial of service vulnerability | CVE
Details:
Ethereum Aleth is an Ethereum community customer program built on the C++ language that follows the Ethereum protocol.
Version <=1.8.0 of the Aleth Ethereum C++ client has a service denial flaw. The weakness originates in the config.json file…
Tool for free Applescript-based malware detection launched.
#Malwares
MORE DETAILS - https://undercodenews.com/tool-for-free-applescript-based-malware-detection-launched/14/01/2021/
#Malwares
MORE DETAILS - https://undercodenews.com/tool-for-free-applescript-based-malware-detection-launched/14/01/2021/
Google, "Through four zero-day vulnerabilities, someone attacks Windows and Android"
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/google-through-four-zero-day-vulnerabilities-someone-attacks-windows-and-android/14/01/2021/
#Vulnerabilities
MORE DETAILS - https://undercodenews.com/google-through-four-zero-day-vulnerabilities-someone-attacks-windows-and-android/14/01/2021/
🔵Espressif ESP-IDF buffer error vulnerability:
https://dailycve.com/espressif-esp-idf-buffer-error-vulnerability
https://dailycve.com/espressif-esp-idf-buffer-error-vulnerability
Dailycve
Espressif ESP-IDF buffer error vulnerability | CVE
Details:
Espressif ESP-IDF is a development platform developed by Espressif for the Internet of Things. There is a buffer error flaw in Espressif ESP-IDF, which can be abused by attackers to crash applications. The following products and versions are…
Sberbank created the Zoom "killer"
#International
MORE DETAILS - https://undercodenews.com/sberbank-created-the-zoom-killer/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/sberbank-created-the-zoom-killer/14/01/2021/
A new and near-final version of Windows 10X has been leaked.
#Updates
MORE DETAILS - https://undercodenews.com/a-new-and-near-final-version-of-windows-10x-has-been-leaked/14/01/2021/
#Updates
MORE DETAILS - https://undercodenews.com/a-new-and-near-final-version-of-windows-10x-has-been-leaked/14/01/2021/
🔵A dll hijacking vulnerability exists in Odd Games Accelerator (Windows client):
https://dailycve.com/dll-hijacking-vulnerability-exists-odd-games-accelerator-windows-client
https://dailycve.com/dll-hijacking-vulnerability-exists-odd-games-accelerator-windows-client
Dailycve
A dll hijacking vulnerability exists in Odd Games Accelerator (Windows client) | CVE
Details:
Qiyou E-sports Accelerator is an e-sports-level online competitive gaming accelerator.
There is a DLL hijacking flaw in the Unusual Games E-sports accelerator (Windows client). Attackers are able to run malicious code exploiting this loophole.…
🔵Zhejiang Lande Network Technology Co., Ltd. O2OA system has logic flaws and vulnerabilities:
https://dailycve.com/zhejiang-lande-network-technology-co-ltd-o2oa-system-has-logic-flaws-and-vulnerabilities
https://dailycve.com/zhejiang-lande-network-technology-co-ltd-o2oa-system-has-logic-flaws-and-vulnerabilities
Dailycve
Zhejiang Lande Network Technology Co., Ltd. O2OA system has logic flaws and vulnerabilities | CVE
Details:
Zhejiang Lande Network Technology Co., Ltd.'s business scope covers: computer applications, network technology and product creation, professional services, incorporation of computer systems, and technical services for intelligent building…
The CEO of Parler says its service may never be online again.
#International
MORE DETAILS - https://undercodenews.com/the-ceo-of-parler-says-its-service-may-never-be-online-again/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/the-ceo-of-parler-says-its-service-may-never-be-online-again/14/01/2021/
CEO of Twitter: Trump's ban is the right decision, but it sets a troubling precedent.
#International
MORE DETAILS - https://undercodenews.com/ceo-of-twitter-trumps-ban-is-the-right-decision-but-it-sets-a-troubling-precedent/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/ceo-of-twitter-trumps-ban-is-the-right-decision-but-it-sets-a-troubling-precedent/14/01/2021/
🔵File upload vulnerability exists in CatfishCMS:
https://dailycve.com/file-upload-vulnerability-exists-catfishcms
https://dailycve.com/file-upload-vulnerability-exists-catfishcms
Dailycve
File upload vulnerability exists in CatfishCMS | CVE
Details:
Catfish CMS is a PHP content management framework which is free and open source.
CatfishCMS has a weakness for file transfer, which can be used to access server access permissions by attackers.
References:
http://www.catfish-cms.com/
🔵Mblog open source Java blog system has logic flaws:
https://dailycve.com/mblog-open-source-java-blog-system-has-logic-flaws
https://dailycve.com/mblog-open-source-java-blog-system-has-logic-flaws
Dailycve
Mblog open source Java blog system has logic flaws | CVE
Details:
Mblog is an open source and free blog system built in the Java language, using spring-boot, jpa, shiro, bootstrap and other common frameworks to support the mysql/h2 database.
The Mblog open source Java blog framework has a weakness with a…
🔵Vientiane webmaster 2008 enhanced version has dll hijacking vulnerability:
https://dailycve.com/vientiane-webmaster-2008-enhanced-version-has-dll-hijacking-vulnerability
https://dailycve.com/vientiane-webmaster-2008-enhanced-version-has-dll-hijacking-vulnerability
Dailycve
Vientiane webmaster 2008 enhanced version has dll hijacking vulnerability | CVE
Details:
Vientiane Site Management is a management platform suitable for Internet cafe owners developed by Vientiane.
There is a DLL hijacking flaw in the improved version of Vientiane Network Management 2008. This vulnerability can be used by attackers…
🔵PDF cat split and merge software has dll hijacking vulnerability:
https://dailycve.com/pdf-cat-split-and-merge-software-has-dll-hijacking-vulnerability
https://dailycve.com/pdf-cat-split-and-merge-software-has-dll-hijacking-vulnerability
Dailycve
PDF cat split and merge software has dll hijacking vulnerability | CVE
Details:
PDF cat split and merge software is a software that merges PDF files.
A dll hijacking vulnerability is available for the PDF cat break and merge applications. This vulnerability can be exploited by attackers to load the dll without signature…
BlackBerry sold 90 primary patents to Huawei for smartphones.
#International
MORE DETAILS - https://undercodenews.com/blackberry-sold-90-primary-patents-to-huawei-for-smartphones/14/01/2021/
#International
MORE DETAILS - https://undercodenews.com/blackberry-sold-90-primary-patents-to-huawei-for-smartphones/14/01/2021/
