Google Takes Down 50,000 Instances of Pro-Chinese DRAGONBRIDGE Influence Operation

Google on Thursday disclosed it took steps to dismantle over 50,000 instances of activity orchestrated by a pro-Chinese influence operation known as DRAGONBRIDGE in 2022. "Most DRAGONBRIDGE activity is low quality content without a political message, populated across many channels and blogs," the...

Google Takes Down 50,000 Instances of Pro-Chinese DRAGONBRIDGE Influence Operation

Google on Thursday disclosed it took steps to dismantle over 50,000 instances of activity orchestrated by a pro-Chinese influence operation known as DRAGONBRIDGE in 2022. "Most DRAGONBRIDGE activity is low quality content without a political message, populated across many channels and blogs," the...

ChinaMobile GPN2.4P21-C-CN 路径遍历漏洞

China Mobile ChinaMobile GPN2.4P21-C-CN is a wireless router from China Mobile. A path traversal vulnerability exists in the ChinaMobile GPN2.4P21-C-CN. An attacker can use this vulnerability to read arbitrary files on the server running the application...

Dreamer CMS 跨站脚本漏洞

Dreamer CMS is a Dreamer Content Management System by the individual developer Junnan Wang in China. A cross-site scripting vulnerability exists in isoftforce Dreamer CMS version 4.0.1 and earlier versions. An attacker could exploit this vulnerability to conduct cross-site scripting attacks...

ChinaMobile GPN2.4P21-C-CN 路径遍历漏洞

China Mobile ChinaMobile GPN2.4P21-C-CN is a wireless router from China Mobile. A security vulnerability exists in the ChinaMobile GPN2.4P21-C-CN. An attacker can exploit this vulnerability to access the configuration interface...

Chinese Hackers Utilize Golang Malware in DragonSpark Attacks to Evade Detection

Organizations in East Asia are being targeted by a likely Chinese-speaking actor dubbed DragonSpark while employing uncommon tactics to go past security layers. "The attacks are characterized by the use of the little known open source SparkRAT and malware that attempts to evade detection through...

Chinese Hackers Utilize Golang Malware in DragonSpark Attacks to Evade Detection

Organizations in East Asia are being targeted by a likely Chinese-speaking actor dubbed DragonSpark while employing uncommon tactics to go past security layers. "The attacks are characterized by the use of the little known open source SparkRAT and malware that attempts to evade detection through...

TikTok CEO told to "step up efforts to comply" with digital laws

EU Commissioner Thierry Breton, the EU's digital policy chief, "explicitly conveyed" to TikTok CEO Shou Zi Chew that the company must "step up efforts to comply" with the European Union's rules on copyright, data protection, and the Digital Services Act DSA--an EU regulation setting out "an...

New BOLDMOVE Backdoor uses FortiOS vulnerability for initial access

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A suspected China-nexus campaign has exploited a vulnerability in Fortinets FortiOS SSL-VPN, known as CVE-2022-42475. The exploitation was believed to have occurred as early as October 2022 and the targe...

auto.china.com Cross Site Scripting vulnerability OBB-3160297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

编号撤回

This CVE number has been withdrawn...

china-tbc.com Open Redirect vulnerability OBB-3140204

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

china-baolin.com Open Redirect vulnerability OBB-3140203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ZTE MF286R Command Injection Vulnerability

The ZTE MF286R is a wireless router from China's ZTE Corporation ZTE. A command injection vulnerability exists in the ZTE Mobile MF286R NordicMF286RB06, which stems from insufficient validation of input parameters and can be exploited by an attacker to execute arbitrary commands...

TP-LINK TL-SG105PE(UN) 授权问题漏洞

The TP-LINK TL-SG105PEUN is a switch from China P&L TP-LINK. A security vulnerability exists in versions prior to TP-LINK TL-SG105PEUN 1.01.0.0 Build 20221208, which can be exploited by an attacker to potentially impersonate the product administrator, potentially gain access to information, and...

APT Topic Summary Report: Cisco Talos Year in Review 2022

State-sponsored or state-aligned advanced persistent threats APTs adapted to the changing geopolitical landscape in 2022. Cisco Talos observed several offensive cyber campaigns linked to several groups stemming from Russia, Iran, China, North Korea, and countries in the Indian subcontinent. These...

编号撤回

This CVE number has been withdrawn...

Tenda A15 wrlEn Parameter Stack Overflow Vulnerability

Tenda A15 is a WiFi extender from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda A15 wrlEn parameter due to incorrect boundary checking performed by /goform/WifiBasicSet. By sending an overly long string using the wrlEn parameter, a remote attacker could exploit the...

Tenda A15 wepkey parameter stack overflow vulnerability

Tenda A15 is a WiFi extender from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda A15 wepkey parameter, which originates from the lack of length checking of input data in the wepkey parameter of /goform/WifiBasicSet, and can be exploited by an attacker to execute...

Tenda A15 wepkey3 parameter stack overflow vulnerability

Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wepkey3 parameter, which stems from a lack of length checking of input data in the wepkey3 parameter of /goform/WifiBasicSet, and could be exploited to execute arbitrary code on the system...