CVE-2021-37273

CVE-2021-37273 affects China Telecom EPON Tianyi Gateway ZXHN F450(EPON ONU) 3.0. The vulnerability is a Denial of Service that allows an attacker to restart the device, impacting availability. The concrete affected device/firmware identified from multiple sources; root cause details are not expa...

China Telecom Corporation EPON Tianyi Gateway ZXHN F450 安全漏洞

The China Telecom Epon Tianyi Gateway ZXHN F450 is a hardware terminal of the "Optical Cat Smart Router" from China Telecom Corporation China Telecom. A security vulnerability exists in the China Telecom Corporation EPON Tianyi Gateway ZXHN F450 that originates from a denial of service issue in t...

Huawei P40 server-side request forgery vulnerability

Huawei P40 is a smartphone from Huawei China.A security vulnerability exists in the Huawei P40, which stems from the product not adequately verifying input data when processing certain messages. An attacker could use the vulnerability to access sensitive resources...

Russian electronic voting system hit by 19 DDoS attacks in one day

By Waqas According to local Russian media, these DDoS attacks originated from several different countries including India, China, Brazil, Russia, and the US. This is a post from HackRead.com Read the original post: Russian electronic voting system hit by 19 DDoS attacks in one day...

编号撤回

This CVE number has been withdrawn...

Huawei AIS-BW50-00 Authorization Issues Vulnerability

The Huawei AIS-BW50-00 is a portable Bluetooth speaker from Huawei, a Chinese company. The Huawei AIS-BW50-00 suffers from an authorization issue vulnerability that stems from improper authorization management and can be exploited by an attacker with physical access to the device and malicious...

Delta Electronics DOPSoft 2 Buffer Overflow Vulnerability (CNVD-2021-70154)

Delta Electronics DOPSoft is a set of human-machine interface HMI software from Delta Electronics in Taiwan, China. A security vulnerability exists in Delta Electronics DOPSoft 2, which arises from a lack of proper validation of user-supplied data when parsing a specific project file in the...

编号撤回

This CVE number has been withdrawn...

SideWalk Backdoor Linked to China-Linked Spy Group ‘Grayfly’

The novel backdoor technique called SideWalk, seen in campaigns targeting US media and retailers late last month, has been tied to an adversary that’s been around for quite a while: namely, China-linked Grayfly espionage group. ESET researchers, who named and discovered the new “SparklingGoblin”...

china-versace.com Cross Site Scripting vulnerability OBB-2133264

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Microsoft Says Chinese Hackers Were Behind SolarWinds Serv-U SSH 0-Day Attack

Microsoft has shared technical details about a now-fixed, actively exploited critical security vulnerability affecting SolarWinds Serv-U managed file transfer service that it has attributed with "high confidence" to a threat actor operating out of China. In mid-July, the Texas-based company...

A deep-dive into the SolarWinds Serv-U SSH vulnerability

Several weeks ago, Microsoft detected a 0-day remote code execution exploit being used to attack the SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center MSTIC attributed the attack with high confidence to DEV-0322, a group operating out of Chin...

A deep-dive into the SolarWinds Serv-U SSH vulnerability

Several weeks ago, Microsoft detected a 0-day remote code execution exploit being used to attack the SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center MSTIC attributed the attack with high confidence to DEV-0322, a group operating out of Chin...

ZTE ZXV10 M910 code issue vulnerability

The ZTE ZXV10 M910 is a video conferencing HD video server from ZTE Corporation China.A security vulnerability exists in the ZTE ZXV10 M910, which can be exploited by attackers to execute arbitrary commands by sending deserialized payloads to port 5001...

编号撤回

This CVE number has been withdrawn...

D-Link DIR-816 Command Execution Vulnerability (CNVD-2021-67516)

The D-Link DIR-816 is a wireless router from D-Link, Taiwan, China.The D-Link DIR-816 has a security vulnerability that could be exploited by attackers to execute arbitrary php code via the typename parameter...

Annke Network Video Recorder

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low attack complexity Vendor: Annke Equipment: N48PBB NVR Vulnerability: Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability may cause a stack-based buffer overflow, which could allow an...

Multiple Huawei CloudEngine Products Denial of Service Vulnerabilities

Huawei CloudEngine 12800 is a 12800 series data center switch. Huawei Cloudengine 5800 is a 5800 series data center switch from Huawei, China. Huawei CloudEngine 6800 is a 6800 series 10GbE switch for data centers. A denial-of-service vulnerability exists in several Huawei CloudEngine products,...

D-Link DVX-2000MS Default Account Vulnerability

A security vulnerability exists in the D-Link DVX-2000MS, a hardware for IP telephony systems from D-Link in Taiwan, China. file contains hard-coded credentials that do not record user accounts. An attacker could exploit this vulnerability to recover plaintext passwords from hash values...

ProxyShell and PetitPotam exploits weaponized by LockFile Ransomware Group

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. LockFile, a new ransomware gang, has been active since last week. LockFile began by using a publicly disclosed PetitPotam exploit CVE-2021-36942 to compromise Windows Domain Controllers earlier this week. Using ProxyShell...