Comparison Overview
Zoho China
Zoho China
Beijing, 150718, CN
Last Update: 01/04/2026
Zoho(卓豪)是能够满足企业运行和管理的一站式云平台，已陆续推出50多款在线SaaS软件产品，包括CRM、在线Office、邮箱、项目管理、团队协作、人事管理、财务管理、BI商业智能、应用开发平台等等。从超大规模的跨国企业，到刚刚起步的创业公司；从协同工作的团队，到自由职业的个人，目前在150多个国家和地区拥有超过1亿用户。Zoho不仅仅是一系列软件工具，更是每个人喜爱的工作和生活方式。 Zoho is a one-stop cloud platform that can meet the needs of enterprise ...
Daraz
Daraz Head Office, 1st Floor, NASTP Silicone Building, Main Shahrah-e-Faisal, Karachi, Karachi, 75500, PK
Last Update: 01/10/2026
Founded in 2015, Daraz is the leading e-commerce platform in South Asia with operations in Pakistan, Bangladesh, Sri Lanka, Nepal, and Myanmar. It provides sellers and consumers with cutting-edge marketplace technology, targeting a rapidly growing region of over 500 mil...
Compliance Ranges Comparison
Zoho China
Daraz
Benchmark & Cyber Underwriting Signals
Incidents vs Software Development Industry Avg (This Year)
No incidents recorded for Zoho China in 2026.
Incidents vs Software Development Industry Avg (This Year)
No incidents recorded for Daraz in 2026.
Incident History - Zoho China (X = Date, Y = Severity)
Zoho China cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Daraz (X = Date, Y = Severity)
Daraz cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Zoho China
Daraz
FAQ
Latest Global CVEs
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response.
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.
IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API access, enabling the attacker to read and manipulate the victim's DataStage projects, flows, assets, and pipeline definitions. This is client-side SDK code running on the user's own machine, so exploitation requires an external network interceptor rather than a co-tenant in the shared cluster.