Comparison Overview

Nothnagle Realtors

VS

Shimao Group

Nothnagle Realtors

undefined, undefined, NY, undefined, US
Last Update: 2025-05-06 (UTC)
Between 900 and 1000
https://www.howardhanna.com/Homes/New-York

Excellent

Nothnagle was Rochester's number one and only full service realty firm, selling homes throughout 15 counties in Western New York. Nothnagle was founded by a real estate innovator, striving to provide the best service for agents and clients. In May 2015, Nothnagle Realtors was acquired by Howard Hanna Real Estate Services. For more information about Howard Hanna Real Estate Services, please visit the company LinkedIn page or website listed below. https://www.linkedin.com/company-beta/36063/ https://www.howardhanna.com/Homes/New-York

NAICS: None
NAICS Definition: Others
Employees: 653
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Shimao Group

None
Last Update: 2025-06-06 (UTC)

Excellent

Between 900 and 1000
www.shimaogroup.com

Shimao Group has entered the real estate industry since 1989, After more than 30 years of development, the Group has made its layout in more than 100 core development cities across China, involving real estate, commercial, property management, hotel, theme entertainment and culture. Following the national strategy, Shimao continuously provides customers with high-level quality experience in living, life, consumption, business and tourism, leading the lifestyle and serving a better life.

NAICS: None
NAICS Definition: Others
Employees: 11
Subsidiaries: 0
12-month incidents
0
Known data breaches
0
Attack type number
0

Compliance Badges Comparison

Security & Compliance Standards Overview

https://images.rankiteo.com/companyimages/nothnagle-realtors.jpeg
Nothnagle Realtors
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
https://images.rankiteo.com/companyimages/世茂房地产.jpeg
Shimao Group
—
ISO 27001
Not verified
—
SOC 2
Not verified
—
GDPR
No public badge
—
PCI DSS
No public badge
Compliance Summary
Nothnagle Realtors
100%
Compliance Rate
0/4 Standards Verified
Shimao Group
0%
Compliance Rate
0/4 Standards Verified

Benchmark & Cyber Underwriting Signals

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for Nothnagle Realtors in 2025.

Incidents vs Real Estate Industry Average (This Year)

No incidents recorded for Shimao Group in 2025.

Incident History — Nothnagle Realtors (X = Date, Y = Severity)

Nothnagle Realtors cyber incidents detection timeline including parent company and subsidiaries

Incident History — Shimao Group (X = Date, Y = Severity)

Shimao Group cyber incidents detection timeline including parent company and subsidiaries

Notable Incidents

Last 3 Security & Risk Events by Company

https://images.rankiteo.com/companyimages/nothnagle-realtors.jpeg
Nothnagle Realtors
Incidents

No Incident

https://images.rankiteo.com/companyimages/世茂房地产.jpeg
Shimao Group
Incidents

No Incident

FAQ

Both Nothnagle Realtors company and Shimao Group company demonstrate a comparable AI risk posture, with strong governance and monitoring frameworks in place.

Historically, Shimao Group company has disclosed a higher number of cyber incidents compared to Nothnagle Realtors company.

In the current year, Shimao Group company and Nothnagle Realtors company have not reported any cyber incidents.

Neither Shimao Group company nor Nothnagle Realtors company has reported experiencing a ransomware attack publicly.

Neither Shimao Group company nor Nothnagle Realtors company has reported experiencing a data breach publicly.

Neither Shimao Group company nor Nothnagle Realtors company has reported experiencing targeted cyberattacks publicly.

Neither Nothnagle Realtors company nor Shimao Group company has reported experiencing or disclosing vulnerabilities publicly.

Neither Nothnagle Realtors company nor Shimao Group company has publicly disclosed detailed information about the number of their subsidiaries.

Nothnagle Realtors company employs more people globally than Shimao Group company, reflecting its scale as a Real Estate.

Latest Global CVEs (Not Company-Specific)

Description

PyVista provides 3D plotting and mesh analysis through an interface for the Visualization Toolkit (VTK). Version 0.46.3 of the PyVista Project is vulnerable to remote code execution via dependency confusion. Two pieces of code use`--extra-index-url`. But when `--extra-index-url` is used, pip always checks for the PyPI index first, and then the external index. One package listed in the code is not published in PyPI. If an attacker publishes a package with higher version in PyPI, the malicious code from the attacker controlled package may be pulled, leading to remote code execution and a supply chain attack. As of time of publication, a patched version is unavailable.

Published
Date
2025-10-06
Updated
Date
2025-10-06
Risk Information
cvss4
Base: 9.3
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

KUNO CMS is a fully deployable full-stack blog application. In versions prior to 1.3.15, an SSRF (Server-Side Request Forgery) vulnerability exists in the Media module of the Kuno CMS administrative panel. A logged-in administrator can upload a specially crafted SVG file containing an external image reference, causing the server to initiate an outgoing connection to an arbitrary external URL. This can lead to information disclosure or internal network probing. Version 1.3.15 contains a fix for the issue.

Published
Date
2025-10-06
Updated
Date
2025-10-06
Risk Information
cvss4
Base: 5.1
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows remote authenticated users to change the file extension when a vCard file is downloaded.

Published
Date
2025-10-06
Updated
Date
2025-10-06
Risk Information
cvss4
Base: 4.8
Severity: LOW
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
References
Description

The YoSmart YoLink API through 2025-10-02 uses an endpoint URL that is derived from a device's MAC address along with an MD5 hash of non-secret information, such as a key that begins with cf50.

Published
Date
2025-10-06
Updated
Date
2025-10-06
Risk Information
cvss3
Base: 5.8
Severity: LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
References
Description

The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes.

Published
Date
2025-10-06
Updated
Date
2025-10-06
Risk Information
cvss3
Base: 3.5
Severity: HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
References