Huawei HarmonyOS DDMP/ODMF Module Denial of Service Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A denial of service vulnerability exists in the Huawei HarmonyOS DDMP/ODMF module, which can be exploited by attackers to cause a denial of service...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

编号撤回

This CVE number has been withdrawn...

TikTok Admits Staff in China Can Access Europeans’ Data

Plus: Liz Truss’ phone-hacking trouble, Cash App’s sex-trafficking problem, and the rising cost of ransomware...

Tenda AC23 fromSetWifiGusetBasic function buffer overflow vulnerability

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A buffer overflow vulnerability exists in the Tenda AC23 fromSetWifiGusetBasic function, which can be exploited by an attacker to run arbitrary code in the context of an affected application...

D-Link DIR-823G Command Injection Vulnerability (CNVD-2023-21667)

D-Link DIR-823G is a wireless router from D-Link China.D-Link DIR-823G v1.0.2 is vulnerable to command injection, which can be exploited by attackers to execute arbitrary commands via specially crafted packets...

Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15699)

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. A stack overflow vulnerability exists in the Tenda AC23, which can be exploited by an attacker to execute arbitrary code...

Tenda AC23 Stack Overflow Vulnerability

Tenda AC23 is a dual-band gigabit wireless router from Tenda, China. Tenda AC23 is vulnerable to a stack overflow vulnerability, which can be exploited by attackers to execute arbitrary code...

Tenda AC23 Stack Overflow Vulnerability (CNVD-2023-15702)

Tenda AC23 is a dual-band Gigabit wireless router from Tenda China. Tenda AC23 suffers from a stack overflow vulnerability, which originates from a stack overflow in the devName parameter of the ormSetDeviceName function. An attacker can exploit this vulnerability to execute arbitrary code...

SQL Injection Vulnerability in UFIDA GRP-U8 Administration and Utilities Internal Control Management Software (New Government Accounting System Special Edition) (CNVD-2022-84009)

Founded in 1988, UFIDA is a leading digital intelligence platform and service provider for enterprises and public organizations in China and around the world. A SQL injection vulnerability exists in UFIDA GRP-U8 Administration and Utilities Internal Control Management Software New Government...

编号撤回

This CVE number has been withdrawn...

编号撤回

This CVE number has been withdrawn...

e-Excellence U-Office Force 输入验证错误漏洞

e-Excellence U-Office Force is an e-Office platform from China-based First Class Technology e-Excellence. U-Office Force suffers from an input validation error vulnerability that stems from its login feature that allows a remote attacker to implement an open redirect that would redirect users to ...

China Operates Secret ‘Police Stations’ in Other Countries

Plus: The New York Post gets hacked, a huge stalkerware network is exposed, and the US claims China interfered with its Huawei probe...

Friday Squid Blogging: Chinese Squid Fishing

China claims that it is "engaging in responsible squid fishing": Chen Xinjun, dean of the College of Marine Sciences at Shanghai Ocean University, made the remarks in response to recent accusations by foreign reporters and actor Leonardo DiCaprio that China is depleting its own fish stock and tha...

编号撤回

This CVE number has been withdrawn...

A Pro-China Disinfo Campaign Is Targeting US Elections—Badly

The suspected Chinese influence operation had limited success. But it signals a growing threat from a new disinformation adversary...

The Spyder Loader malware targets organizations in Hong Kong

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Spyder Loader malware was first publicly documented in March 2021. The recent Spyder Loader malware campaign appears to have had the ultimate goal of information theft, and the threat actor behind th...

TP-Link TL-WR841N Cross-Site Scripting Vulnerability

TP-Link TL-WR841N is a wireless router from TP-LINK, China. TP-Link TL-WR841N is vulnerable to a cross-site scripting vulnerability, which originates from a front-end that does not filter special characters and can be exploited by attackers to cause cross-site scripting attacks...