4440 matches found
TOTOLINK T8 suffers from a buffer overflow vulnerability (CNVD-2022-69723)
TOTOLINK T8 is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK T8 suffers from a buffer overflow vulnerability that can be exploited by an attacker to cause a denial of service...
PT-2022-23681 · Samsung · Samsung Members
Name of the Vulnerable Software and Affected Versions: Samsung Members versions prior to 4.3.00.11 Samsung Members version prior to 14.0.02.4 in China Description: The issue allows local attackers to access device identification via log, due to exposure of sensitive information in...
TOTOLINK A3002R Buffer Overflow Vulnerability
The TOTOLINK A3002R is a wireless dual-band Gigabit router from China's TOTOLINK that complies with the latest IEEE802.11ac Wave 2 standard. The TOTOLINK A3002R suffers from a buffer overflow vulnerability that can be exploited by attackers to cause a denial of service...
Huawei HarmonyOS Buffer Overflow Vulnerability (CNVD-2022-64981)
Huawei HarmonyOS is an operating system from Huawei China. HarmonyOS version 2.0 contains a buffer overflow vulnerability that stems from the fact that the HWKEYMASTER module does not perform a legitimacy check on the key format, which can be exploited to cause out-of-bounds access...
Researchers Find New Android Spyware Campaign Targeting Uyghur Community
A previously undocumented strain of Android spyware with extensive information gathering capabilities has been found disguised as a book likely designed to target the Uyghur community in China. The malware comes under the guise of a book titled "The China Freedom Trap," a biography written by the...
Google Pixel 资源管理错误漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's announcement...
PublicCMS server-side request forgery vulnerability
PublicCMS is an open source content management system CMS written in Java by PublicCMS, China. publicCMS 4.0.202011.b previous versions exist server-side request forgery vulnerability, the vulnerability stems from the file parameter for access to the IP and domain name is not restricted. An...
TikTok Denies Data Breach Reportedly Exposing Over 2 Billion Users' Information
Popular short-form social video service TikTok denied reports that it was breached by a hacking group, after it claimed to have gained access to an insecure cloud server. "TikTok prioritizes the privacy and security of our users' data," the ByteDance-owned company told The Hacker News. "Our...
DedeCMS Cross-Site Scripting Vulnerability (CNVD-2022-62223)
DedeCMS 织梦内容管理系统 is a PHP-based open source content management system CMS from China's Zhuo Zhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval.A security vulnerability exists in DedeCMS version V5.7.97, which was discovered to...
Police Across US Bypass Warrants With Mass Location-Tracking Tool
Plus: An unsecured database exposed face recognition data in China, ‘Cuba’ ransomware knocks out Montenegro, and more...
Chinese Hackers Used ScanBox Framework in Recent Cyber Espionage Attacks
A months-long cyber espionage campaign undertaken by a Chinese nation-state group targeted several entities with reconnaissance malware so as to glean information about its victims and meet its strategic goals. "The targets of this recent campaign spanned Australia, Malaysia, and Europe, as well ...
TOTOLINK A7000R Access Control Error Vulnerability
TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from an access control vulnerability that stems from improper access control in its /cgi-bin/ExportSettings.sh...
Watering Hole Attacks Push ScanBox Keylogger
A China-based threat actor has ramped up efforts to distribute the ScanBox reconnaissance framework to victims that include domestic Australian organizations and offshore energy firms in the South China Sea. The bait used by the advanced threat group APT is targeted messages that supposedly link...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...
编号已被CVE保留
No details are available at this time...