New ToddyCat Hacker Group on Experts' Radar After Targeting MS Exchange Servers

An advanced persistent threat APT actor codenamed ToddyCat has been linked to a string of attacks aimed at government and military entities in Europe and Asia since at least December 2020. The relatively new adversarial collective is said to have commenced its operations by targeting Microsoft...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58306)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsdownload.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58305)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by attackers to perform SQL injection attacks via the id parameter in /admin/deluser.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58309)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/showbad.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58308)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/dlsendmail.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58307)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsprint.php...

ZZCMS SQL Injection Vulnerability (CNVD-2022-58304)

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS version 2019, which stems from a SQL injection issue via dlid cookie in /dl/dlsendsms.php. No detailed vulnerability details are currently available...

ASUS Control Center SQL Injection Vulnerability

ASUS Control Center is a new centralized IT management software from ASUS China. The software can monitor and control ASUS servers, workstations. A SQL injection vulnerability exists in ASUS Control Center v1.4.2.5. An attacker can exploit this vulnerability to inject SQL commands into specific A...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google Inc. in the United States. There is a security vulnerability in Google Chrome, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

WAVLINK WN535 G3 Information Disclosure Vulnerability

WAVLINK WN535 G3 is a wireless router from WAVLINK China.WAVLINK WN535 G3 version M35G3R.V5030.180927 is vulnerable to an information disclosure vulnerability that stems from improper authorization management on the livemfg.shtml page, which could be exploited by an attacker to obtain sensitive...

China-linked APT Flew Under Radar for Decade

Researchers have identified a small yet potent China-linked APT that has flown under the radar for nearly a decade running campaigns against government, education and telecommunication organizations in Southeast Asia and Australia. Researchers from SentinelLabs said the APT, which they dubbed Aoq...

MINMAX SQL Injection Vulnerability

MINMAX is a high power density 10W DC-DC converter for space-critical applications from China-based MINMAX. MINMAX is vulnerable to SQL injection, which can be exploited by attackers to cause a sql injection issue through manipulation of the id parameter in /newsDia.php...

chinafairinc.com Cross Site Scripting vulnerability OBB-2652441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

编号撤回

This CVE number has been withdrawn...

HUAWEI EMUI and Magic UI Authorization Issue Vulnerability

HUAWEI EMUI and Magic UI is an Android-based mobile operating system developed by the Chinese company Huawei HUAWEI. HUAWEI EMUI and Magic UI suffers from an authorization issue vulnerability that stems from a lack of authorization in a system component, which can be exploited by an attacker to...

编号撤回

This CVE number has been withdrawn...

CVE-2021-46813

Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability...

How China Hacked US Phone Networks

Plus: Russia rattles its cyber sword, a huge Facebook phishing operation is uncovered, feds take down the SSNDOB marketplace, and more...

SICUNET Access Controller 安全漏洞

SICUNET Access Controller is a browser-based access from SICUNET China that allows you to connect your panel to our cloud servers so that you can access your panel without firewall settings. A security vulnerability exists in SICUNET Access Controller version 0.32-05z, which stems from a problem...

ZZCMS SQL Injection Vulnerability (CNVD-2022-56480)

ZZCMS is a content management system CMS from the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of security filtering of the id parameter in /dl/dldownload.php. No detailed vulnerability details are provided at this time...