Microsoft discovers threat actor targeting SolarWinds Serv-U software with 0-day exploit

Microsoft has detected a 0-day remote code execution exploit being used to attack SolarWinds Serv-U FTP software in limited and targeted attacks. The Microsoft Threat Intelligence Center MSTIC attributes this campaign with high confidence to DEV-0322, a group operating out of China, based on...

Directory Traversal Vulnerability in China Unicom China169

CHINA169 is based on the former China Telecom China Broadband Internet CHINANET's interconnection network in the ten northern provinces, and after large-scale reconstruction and expansion, it has formed a brand-new network with a new structure, which can vigorously dredge up broadband services,...

SQL Injection Vulnerability in Qilai OA

Xi'an Qilai Software Technology Co., Ltd. is an IT service provider of R&D and implementation of industry-applied collaborative OA management software, and is the only OA software vendor in China that provides copyright-free OEM authorization and provides registered programs. A SQL injection...

Unauthorized Access Vulnerability in Midland Public Health's Mobile Follow-Up Visits

Chongqing Zhonglian Information Industry Co., Ltd. is one of the largest private high-tech enterprises specializing in the research, development and promotion of medical informatization products, and one of the largest providers of comprehensive solutions for digital hospitals in China. An...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software (CNVD-2021-55194)

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...

Unauthorized Access Vulnerability in Fuji Xerox (China) Limited DocuPrint P455 d

Fuji Xerox China Co., Ltd. provides printers and MFPs suitable for small and medium-sized enterprises and individual households, color digital multifunctionals that can meet the different document management needs of enterprises, production digital printers, and large format electrostatic digital...

Weak Password Vulnerability in TopGate500 of Skyrun Technology Group

Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A weak password vulnerability exists in TopGate500 of Tianrongxin Technology Group, which allows an attacker to log in to...

Unauthorized Access Vulnerability in Epson (China) Limited L6160 Series

Epson China Co., Ltd. is a company whose business mainly consists of the information-related products business such as printers, scanners and projectors, the electronic components business, and the industrial automation equipment business. An unauthorized access vulnerability exists in the L6160...

Unauthorized Access Vulnerability in Aficio MP C2800 at Ricoh (China) Investment Co.

Ricoh China Investment Co., Ltd. provides services and solutions such as document output management services and IT solutions such as office image processing equipment e.g., MFPs, printers, etc., production digital printers, and more. An unauthorized access vulnerability exists in the Ricoh China...

Realtek HAD Buffer Overflow Vulnerability

Realtek HAD is a high-definition audio driver package from China-based Realtek. Realtek HAD is vulnerable to a buffer overflow vulnerability, which could be exploited by an attacker to send a special string to the kernel driver in user mode, and the kernel driver causes a system crash due to an...

BIOPASS RAT: New Malware Sniffs Victims via Live Streaming

We discovered a new malware that targets online gambling companies in China via a watering hole attack, in which visitors are tricked into downloading a malware loader disguised as a legitimate installer for well-known apps such as Adobe Flash Player or Microsoft Silverlight...

Information Leakage Vulnerabilities in the Education Cloud Platform of Beijing Zhongqing Nabo Information Technology Co.

Beijing Zhongqing Nabo Information Technology Co., Ltd. is a core enterprise of Zhongqing Group and one of the pioneering enterprises in the field of education information technology in China. An information leakage vulnerability exists in the education cloud platform of Beijing Zhongqing Nabo...

QSAN SANOS and QSAN XEVO Command Injection Vulnerability

QSAN SANOS and QSAN XEVO are both products of QSAN China. QSAN SANOS is a SAN storage management operating system. It comes with a refreshingly easy-to-use Web GUI and can be easily deployed to any infrastructure.QSAN XEVO is a flash data management system. It reduces repetitive tasks and provide...

Arbitrary File Deletion Vulnerability in Library Cluster Management System of Guangzhou Tutron Computer Software Development Co. Ltd (CNVD-2021-51296)

Guangzhou Tutron Computer Software Development Co., Ltd. is the leader of all kinds of library service systemization construction software, is a high-tech enterprise integrating consulting service, product development, application integration, digital resource service, form design and technical...

Command Execution Vulnerability in TopGate500 at Skyrise Technology Group

Founded in 1995 as the first network security enterprise in China, Skyrun Technology Group has become a leading network security, big data and cloud service provider in China. A command execution vulnerability exists in TopGate500 of Tianrongxin Technology Group, which can be exploited by an...

Unauthorized Access Vulnerability in MX-4070V of Sharp Trading (China) Co.

MX-4070V is a printer product of Sharp Trading China Co. An unauthorized access vulnerability exists in the Sharp Trading China Co. MX-4070V, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group (CNVD-2021-51352)

Skyrise Technology Group is a leading provider of network security, big data and security cloud services in China. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group, which can be exploited by an attacker to gain control of a server...

Ltd. T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera with Weak Password Vulnerability

Ltd. is China's leading R&D and manufacturer of intelligent terminal equipment for intelligent parking. Shenzhen Qianhai Huaxia Zhixin Data Technology Co., Ltd T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera has a weak password vulnerability, which can be...

Arbitrary File Download Vulnerability in iOffice Hospital Edition

hereinafter referred to as: Redfan Technology is one of the top ten military industrial groups - China State Shipbuilding Corporation under the Guangzhou Shipbuilding International Company Limited Holdings of high-tech enterprises. iOffice Hospital Edition exists arbitrary file download...

Unauthorized Access Vulnerability in Epson (China) Limited L565 Series Printers

Epson China Co., Ltd. is a company whose business includes information-related products such as printers, scanners and projectors, electronic components, and industrial automation equipment. An unauthorized access vulnerability exists in the Epson China Limited L565 Series printers, which can be...