jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Shenghua in China. A security vulnerability exists in jshERP 3.5 and earlier versions, which stems from improper authorization due to incorrect manipulation of the parameter ID in the file /user/delete...

ASUS MyASUS 安全漏洞

ASUS MyASUS is an official ASUS PC application from Asus China Inc. A security vulnerability exists in ASUS MyASUS that stems from insecure storage of sensitive keys, which could lead to unauthorized participants obtaining a token...

Microsoft Windows Input Validation Error Vulnerability (CNVD-2025-16780)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

Siemens SICAM TOOLBOX II Trust Management Issue Vulnerability

Siemens SICAM TOOLBOX II is an engineering software from Siemens, Germany. A trust management issue vulnerability exists in Siemens SICAM TOOLBOX II that stems from a failure to check the extended key usage attribute of a device certificate, which could be exploited by an attacker to cause a...

RuoYi 安全漏洞

RuoYi is a backend management system by the individual developer of RuoYi in China. A security vulnerability exists in RuoYi 4.8.1 and earlier versions, which stems from an improper restriction of the rendering UI layer of the Image Source Handler component...

China’s Salt Typhoon Hackers Breached the US National Guard for Nearly a Year

Plus: Secret IRS data-sharing with ICE, a 20-year-old hackable vulnerability in train brakes, and more...

China's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones

Cybersecurity researchers have shed light on a mobile forensics tool called Massistant that's used by law enforcement authorities in China to gather information from seized mobile devices. The hacking tool, believed to be a successor of MFSocket, is developed by a Chinese company named SDIC...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Course module and may lead to cross-site scripting attacks...

TECNO tech.palm.id 安全漏洞

TECNO tech.palm.id is a mobile application from TECNO Corporation in China. A security vulnerability exists in TECNO tech.palm.id, which stems from an authentication flaw that could lead to information disclosure...

China-Built SafeLine WAF Gains Global Popularity Among Startups & Homelabs

Beijing, China, 14th July 2025, CyberNewsWire...

jshERP 路径遍历漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. jshERP 3.5 and previous versions of path traversal vulnerability, the vulnerability stems from improper operation of the parameter Title in the file SystemConfigController.java, which may lead to pat...

HGiga iSherlock 安全漏洞

HGiga iSherlock is a series of software products from China Henderson HGiga. A security vulnerability exists in HGiga iSherlock that originates from OS command injection and could lead to remote code execution...

WellChoose BatchSignCS 安全漏洞

WellChoose BatchSignCS is a signing service system from WellChoose, Inc. of Taiwan, China. A security vulnerability exists in WellChoose BatchSignCS that originates from an arbitrary file write and could lead to the execution of arbitrary code...

UTT HiPER 840G 安全漏洞

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

FoxCMS 安全漏洞

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS v1.2.6, which originates from the presence of arbitrary file uploads in the component /controller/PicManager.php, which may result in the execution of...

Jhenggao iPublish System 安全漏洞

Jhenggao iPublish System is a presentation platform from Jhenggao Corporation, Taiwan, China. A security vulnerability exists in the Jhenggao iPublish System that originates from vulnerability to arbitrary file read attacks...

07FLY多款产品 安全漏洞

07FLY-CMS and so on are products of China Zero Takeoff 07FLY company.07FLY-CMS is a free and open source content management system.07FLYCMS is a free and open source content management system.07Fly 07FLYCRM and so on are products of China Zero Takeoff 07Fly company.07FLYCRM is a customer...

Taiwan NSB Alerts Public on Data Risks from Douyin, Weibo, and RedNote Over China Ties

Taiwan's National Security Bureau NSB has warned that China-developed applications like RedNote aka Xiaohongshu, Weibo, Douyin, WeChat, and Baidu Cloud pose security risks due to excessive data collection and data transfer to China. The alert comes following an inspection of these apps carried ou...

WINSTARS WN572HP3 安全漏洞

WINSTARS WN572HP3 is a WiFi extender from China Xinboyue WINSTARS. A security vulnerability exists in WINSTARS WN572HP3 version v230525, which originates from a heap overflow in the CONTENTLENGTH variable...

Conjure Position Department Service Quality Evaluation System 安全漏洞

Conjure Position Department Service Quality Evaluation System is a position department service quality evaluation system from China Star Space Conjure. A security vulnerability exists in Conjure Position Department Service Quality Evaluation System version 1.0.11 and earlier versions, which...