Hana Nails
Last Update: 2025-03-07 (UTC)
Between 900 and 1000
Excellent
None
NAICS: 541
NAICS Definition:
Employees: 3
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Comparison Overview
Hana Nails
VS
PHLEARN
PHLEARN
Last Update: 2025-03-09 (UTC)
Excellent
Between 900 and 1000
Behind PHLEARN, there is a small group of creatives who took up a giant mission to make the world of creative education better. Make Learning Fun. We create fun and engaging Photoshop, Lightroom, and Photography tutorials for creatives in all phases of their career. We don’t like dry boring tutorials either. Our goal is to make you laugh, make you smile, all while you master your craft. Make Learning Affordable. We believe that everyone deserves to learn from the best and they shouldn’t be driven into debt to do it. We want PHLEARN to be affordable to anyone anywhere who has the desire to learn. Make Learning a Community Effort. We not only provide high-quality education, but we are trying to build a warm, engaging, and supportive creative community. A community where you can creatively express yourself and be embraced for what makes you unique. Make Learning Better. Since our mission is to empower anyone, anywhere to learn to master their creative skills, we have to raise the bar for online education. PHLEARN is dedicated to delivering the best tutorials you have ever watched. Welcome to the PHLEARN. We are happy you are joining us on this journey!
NAICS: 541
NAICS Definition:
Employees: 5
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0
Compliance Badges Comparison
Security & Compliance Standards Overview
Hana Nails
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
PHLEARN
ISO 27001
Not verified
SOC 2
Not verified
GDPR
No public badge
PCI DSS
No public badge
Compliance Summary
Hana Nails
100%
Compliance Rate
0/4 Standards Verified
PHLEARN
0%
Compliance Rate
0/4 Standards Verified
Benchmark & Cyber Underwriting Signals
Incidents vs Photography Industry Average (This Year)
No incidents recorded for Hana Nails in 2025.
Incidents vs Photography Industry Average (This Year)
No incidents recorded for PHLEARN in 2025.
Incident History — Hana Nails (X = Date, Y = Severity)
Hana Nails cyber incidents detection timeline including parent company and subsidiaries
Incident History — PHLEARN (X = Date, Y = Severity)
PHLEARN cyber incidents detection timeline including parent company and subsidiaries
Notable Incidents
Last 3 Security & Risk Events by Company
Hana Nails
Incidents
No Incident
PHLEARN
Incidents
No Incident
FAQ
Both Hana Nails company and PHLEARN company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.
Historically, PHLEARN company has disclosed a higher number of cyber incidents compared to Hana Nails company.
In the current year, PHLEARN company and Hana Nails company have not reported any cyber incidents.
Neither PHLEARN company nor Hana Nails company has reported experiencing a ransomware attack publicly.
Neither PHLEARN company nor Hana Nails company has reported experiencing a data breach publicly.
Neither PHLEARN company nor Hana Nails company has reported experiencing targeted cyberattacks publicly.
Neither Hana Nails company nor PHLEARN company has reported experiencing or disclosing vulnerabilities publicly.
Neither Hana Nails company nor PHLEARN company has publicly disclosed detailed information about the number of their subsidiaries.
PHLEARN company employs more people globally than Hana Nails company, reflecting its scale as a Photography.
Latest Global CVEs (Not Company-Specific)
Description
An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.
Description
A weakness has been identified in JeecgBoot up to 3.8.2. The impacted element is an unknown function of the file /sys/role/exportXls. This manipulation causes improper authorization. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A security flaw has been discovered in JeecgBoot up to 3.8.2. The affected element is an unknown function of the file /sys/user/exportXls of the component Filter Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 4.0
Severity: LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
cvss3
Base: 4.3
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 5.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was identified in JeecgBoot up to 3.8.2. Impacted is an unknown function of the file /sys/tenant/deleteBatch. The manipulation of the argument ids leads to improper authorization. The attack is possible to be carried out remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Description
A vulnerability was determined in JeecgBoot up to 3.8.2. This issue affects some unknown processing of the file /api/getDepartUserList. Executing manipulation of the argument departId can lead to improper authorization. The attack can be executed remotely. This attack is characterized by high complexity. The exploitability is assessed as difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Risk Information
cvss2
Base: 2.1
Severity: HIGH
AV:N/AC:H/Au:S/C:P/I:N/A:N
cvss3
Base: 3.1
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
cvss4
Base: 2.3
Severity: HIGH
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
