4438 matches found
CVE-2023-21518
CVE-2023-21518 affects Samsung SearchWidget prior to v3.3. The vulnerability is due to improper access control that allows untrusted applications to start arbitrary activities, with local attack vector and high impact to confidentiality, integrity, and availability as described in the sources. Re...
Update Your iPhone Right Now to Fix 2 Apple Zero Days
Plus: Discord has a child predator problem, fears rise of China spying from Cuba, and hackers try to blackmail Reddit...
Huawei BiSheng-WNM FW Denial of Service Vulnerability (CNVD-2023-51675)
The Huawei BiSheng-WNM FW is a Huawei printer from Huawei China. A denial of service vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325, which can be exploited by an attacker to cause an exception in the printer service...
Experts Uncover Year-Long Cyber Attack on IT Firm Utilizing Custom Malware RDStealer
A highly targeted cyber attack against an East Asian IT company involved the deployment of a custom malware written in Golang called RDStealer. "The operation was active for more than a year with the end goal of compromising credentials and data exfiltration," Bitdefender security researcher Vict...
State-Backed Hackers Employ Advanced Methods to Target Middle Eastern and African Governments
Governmental entities in the Middle East and Africa have been at the receiving end of sustained cyber-espionage attacks that leverage never-before-seen and rare credential theft and Exchange email exfiltration techniques. "The main goal of the attacks was to obtain highly confidential and sensiti...
ITPison OMICARD EDM 代码问题漏洞
ITPison OMICARD EDM is a high-speed newsletter EDM marketing and distribution system from China-based ITPison. A code issue vulnerability exists in ITPison OMICARD EDM that stems from the file upload feature not restricting the upload of dangerous types of files...
Thinking Software Technology Efence SQL注入漏洞
Thinking Software Technology Efence is a mobile device management solution from China-based Thinking Software Technology. A SQL injection vulnerability exists in Thinking Software Technology Efence due to a login function that does not validate user-entered parameters...
Chinese UNC4841 Group Exploits Zero-Day Flaw in Barracuda Email Security Gateway
A suspected China-nexus threat actor dubbed UNC4841 has been linked to the exploitation of a recently patched zero-day flaw in Barracuda Email Security Gateway ESG appliances since October 2022. "UNC4841 is an espionage actor behind this wide-ranging campaign in support of the People's Republic o...
Chinese UNC4841 Group Exploits Zero-Day Flaw in Barracuda Email Security Gateway
A suspected China-nexus threat actor dubbed UNC4841 has been linked to the exploitation of a recently patched zero-day flaw in Barracuda Email Security Gateway ESG appliances since October 2022. "UNC4841 is an espionage actor behind this wide-ranging campaign in support of the People's Republic o...
编号已被CVE保留
No details are available at this time...
Tenda AC10 缓冲区错误漏洞
Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn version, which stems from a discovery containing a stack overflow via the devName parameter of /goform/SetOnlineDevName...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
CISA issues warning to US businesses: Beware of China's state-sponsored cyber actor
The US Cybersecurity and Infrastructure Security Agency CISA has an urgent message for US businesses: watch out for Volt Typhoon, a threat actor sponsored by the Peoples Republic of China PRC. The agency's joint Cybersecurity Advisory CSA published last week highlights a cluster of tactics,...
Zyxel GS1900-8 安全漏洞
The Zyxel GS1900-8 is an intelligent managed switch from China Hopkins Zyxel with gigabit speeds and basic management features that bring greater flexibility and connectivity to users' business networks. A security vulnerability exists in the Zyxel GS1900-8. No information about this vulnerabilit...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
What is a web shell?
Editors note: The Need to Know is a new series from Talos, which focuses on cybersecurity terms, threats, tools and tactics that are discussed in our broader threat research. Think of this as a living encyclopedia of security terms and trends. Cisco Talos Incident Response recently released our...