4438 matches found
Milesight UR32L Buffer Overflow Vulnerability
The Milesight UR32L is a 4G industrial router from China's Milesight. The Milesight UR32L suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an application to crash...
Milesight UR32L set_ike_profile function buffer overflow vulnerability
The Milesight UR32L is a 4G industrial router from China's Milesight. A buffer overflow vulnerability exists in the Milesight UR32L setikeprofile function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an application to crash...
Milesight UR32L firewall_handler_set function buffer overflow vulnerability (CNVD-2023-55361)
The Milesight UR32L is an industrial router from China-based Milesight. A buffer overflow vulnerability exists in the Milesight UR32L firewallhandlerset function due to incorrect boundary checking in the firewallhandlerset function. An authenticated, remote attacker could exploit this vulnerabili...
Milesight UR32L set_openvpn_client function buffer overflow vulnerability (CNVD-2023-65075)
The Milesight UR32L is a 4G industrial router from China's Milesight. A buffer overflow vulnerability exists in the Milesight UR32L setopenvpnclient function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an application to cras...
Milesight UR32L set_qos function buffer overflow vulnerability (CNVD-2023-65098)
The Milesight UR32L is an industrial router from China-based Milesight. A buffer overflow vulnerability exists in the Milesight UR32L setqos function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an application to crash...
Milesight UR32L set_openvpn_client function buffer overflow vulnerability (CNVD-2023-65079)
The Milesight UR32L is a 4G industrial router from China's Milesight. A buffer overflow vulnerability exists in the Milesight UR32L setopenvpnclient function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an application to cras...
Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China
Two file management apps on the Google Play Store have been discovered to be spyware, putting the privacy and security of up to 1.5 million Android users at risk. These apps engage in deceptive behaviour and secretly send sensitive user data to malicious servers in China. Pradeo, a leading mobile...
Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China
Two file management apps on the Google Play Store have been discovered to be spyware, putting the privacy and security of up to 1.5 million Android users at risk. These apps engage in deceptive behaviour and secretly send sensitive user data to malicious servers in China. Pradeo, a leading mobile...
China-Linked Spyware Found in Google Play Store Apps, 2m Downloads
By Waqas Mobile security solutions provider Pradeos security researchers have shared details of the spyware they discovered hiding on the… This is a post from HackRead.com Read the original post: China-Linked Spyware Found in Google Play Store Apps, 2m Downloads...
Milesight VPN 安全漏洞
Milesight VPN is a web-based VPN monitoring and management platform from China-based Milesight. A security vulnerability exists in Milesight VPN v2.0.2. An attacker can exploit this vulnerability to cause arbitrary Javascript code injection via a specially crafted HTTP request...
ZZCMS 跨站请求伪造漏洞
ZZCMS is a content management system CMS from the China ZZCMS team. A cross-site request forgery vulnerability exists in ZZCMS v.2023, which originates from a vulnerability that allows remote attackers to gain privileges via the add function in adminlist.php...
Amazon Files Lawsuits Against Fraudsters Peddling Fake Reviews
By Waqas According to Amazon, it has already taken significant action against 94 fraudsters operating in the United States, China, and Europe in May 2023. This is a post from HackRead.com Read the original post: Amazon Files Lawsuits Against Fraudsters Peddling Fake Reviews...
Node.js 安全漏洞
Node.js is an open source, cross-platform JavaScript runtime environment. Node.js has a security vulnerability that stems from the ability to bypass policy mechanisms...
DOOR Property Cloud Platform Management Center SQL注入漏洞
DOOR Property Cloud Platform Management Center is a property cloud platform management center of China DOOR Corporation. A security vulnerability exists in DOOR Property Cloud Platform Management Center version 1.0, which originates from an SQL injection vulnerability...
CVE-2023-21518
Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...
CVE-2023-21518
Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...
CVE-2023-21518
Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...
Improper access control
Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity...
