NICKEL targeting government organizations across Latin America and Europe

The Microsoft Threat Intelligence Center MSTIC has observed NICKEL, a China-based threat actor, targeting governments, diplomatic entities, and non-governmental organizations NGOs across Central and South America, the Caribbean, Europe, and North America. MSTIC has been tracking NICKEL since 2016...

NICKEL targeting government organizations across Latin America and Europe

The Microsoft Threat Intelligence Center MSTIC has observed NICKEL, a China-based threat actor, targeting governments, diplomatic entities, and non-governmental organizations NGOs across Central and South America, the Caribbean, Europe, and North America. MSTIC has been tracking NICKEL since 2016...

TaoCMS SQL Injection Vulnerability (CNVD-2021-94813)

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

TaoCMS SQL Injection Vulnerability

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. There is a security vulnerability in Google Android version 11, there is no information about this vulnerability yet, please stay tuned to CNNVD or the manufacturer's announcement...

TaoCMS Cross-Site Scripting Vulnerability

Taocms is a micro Cms Content Management System in China. taocms has a cross-site scripting vulnerability, no details of the vulnerability are provided at this time...

D-Link DIR-809 formStaticDHCP Buffer Overflow Vulnerability

D-Link DIR-809 is a dual-band router from D-Link, China. buffer overflow vulnerability exists in the fun80034d60 function in the D-Link DIR-809 formStaticDHCP, which can be exploited by attackers to submit special requests that can crash applications or execute arbitrary code...

D-Link DIR-809 formVirtualServ Buffer Overflow Vulnerability (CNVD-2021-94719)

The D-Link DIR-809 is a dual-band router from China's AUO D-Link. A buffer overflow vulnerability exists in the D-Link DIR-809, which stems from the FUN8004776c function in the product/formVirtualServ link failing to effectively determine data boundaries. An attacker could cause a denial of servi...

Sunnet eHRD path traversal vulnerability

Sunnet eHRD is a talent management system from SunChat Technology Inc. of Taiwan, China. The system supports talent management and performance management, etc. Sunnet eHRD has a path traversal vulnerability, which can be exploited by attackers to conduct a path traversal attack to access restrict...

Sunnet eHRD Access Control Error Vulnerability

Sunnet eHRD is a talent management system from SunChat Technology, Taiwan, China. The system supports talent management and performance management, etc. Sunnet eHRD has an access control error vulnerability, which can be exploited by an attacker to access the account management page after...

D-Link DIR-809 fromLogin Buffer Overflow Vulnerability (CNVD-2021-94720)

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link, China, which stems from the failure of the sub8003183C function in the product/fromLogin link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in a denial of...

D-Link DIR-809 formAdvFirewall buffer overflow vulnerability

A buffer overflow vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China.The vulnerability stems from the failure of the FUN800462c4 function in the product/formAdvFirewall link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting...

D-Link DIR-809 formSetPortTr Buffer Overflow Vulnerability

A buffer error vulnerability exists in the D-Link DIR-809, a dual-band router from D-Link China. The vulnerability stems from the failure of the sub80046EB4 function in the product/formSetPortTr link to effectively determine data boundaries. An attacker could cause a buffer overflow resulting in ...

Sunnet eHRD Insecure Deserialization Vulnerability

Sunnet eHRD is a talent management system from Sun Chat Technology, Taiwan, China. The system supports talent management and performance management, etc. An insecure deserialization vulnerability exists in Sunnet eHRD, which stems from the inadequate input object validation and restriction of the...

D-Link DIR-809 formSetPortTr Buffer Overflow Vulnerability (CNVD-2021-94717)

D-Link DIR-809 is a dual-band router from D-Link, China.D-Link DIR-809 device firmware version DIR-809AxFW1.12WWB0320190410 has a buffer overflow vulnerability, which originates from FUN8004776c in the product formSetPortTr function fails to effectively determine data boundaries. An attacker coul...

Threat Group Takes Aim Again at Cloud Platform Provider Zoho

State-backed adversaries expanded attacks against cloud platform company Zoho and its ManageEngine ServiceDesk Plus software, a help desk and asset management solution. A recent campaign marks an uptick in attacks against the firm’s platform, which have also included past targeting of Zoho’s...

CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

The U.S. Federal Bureau of Investigation FBI and the Cybersecurity and Infrastructure Security Agency CISA are warning of active exploitation of a newly patched flaw in Zoho's ManageEngine ServiceDesk Plus product to deploy web shells and carry out an array of malicious activities. Tracked as...

Taocms SQL注入漏洞

TaoCMS is a micro Cms Content Management System in China.TaoCMS is vulnerable to SQL injection and no details of the vulnerability are provided...

Taocms 跨站脚本漏洞

Taocms is a micro Cms Content Management System in China. taocms has a cross-site scripting vulnerability, no details of the vulnerability are provided at this time...

Hexo cross-site scripting vulnerability

Hexo is a fast, simple and powerful blogging framework from the personal developer Tommy Chen in China. Hexo suffers from a cross-site scripting vulnerability that stems from Hexo's lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to...