CAJViewer 7.3 suffers from a binary vulnerability (CNVD-2021-45255)

CAJViewer 7.3 is a specialized full-text format viewer for China Journal Network CJN, which supports CJN's TEB, CAJ, NH, KDH and PDF format files. A binary vulnerability exists in CAJViewer 7.3, which can be exploited by attackers to cause a denial of service...

CAJViewer 7.3 suffers from a binary vulnerability (CNVD-2021-45252)

CAJViewer 7.3 is a specialized full-text format viewer for China Journal Network CJN, which supports CJN's TEB, CAJ, NH, KDH and PDF format files. A binary vulnerability exists in CAJViewer 7.3, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in Tianxin SCADA System of Tianxin Instrumentation Group Limited (CNVD-2021-45218)

TIANXIN Instrumentation Group Limited is a professional service provider of flow meters and gas application system solutions in China. A SQL injection vulnerability exists in the TIANXIN SCADA system of TIANXIN Instrumentation Group Limited, which can be exploited by attackers to obtain sensitive...

Jail for consultant who scraped colossal trove of Alibaba customer data

A billion data points, including the usernames and mobile phone numbers of customers have been siphoned off Alibaba websites by a web crawler. The information has reached us about a week after a court ruling in the case. The court ruling A central Chinese court has ruled that an employee of a...

Arbitrary File Download Vulnerability in Blue Shield Firewall of Blue Shield Information Security Technology Co.

Blue Shield Information Security Technology Co., Ltd. is the earliest professional network security enterprise engaged in the research and development, production and sales of information security products with independent intellectual property rights in China. Blue Shield Information Security...

Weak Password Vulnerability in DCN DCME Multicore Engine

Digital China Group Corporation focuses on providing you with full-stack cloud services, including cloud management services such as cloud management, cloud resource procurement, and proprietary cloud services, as well as data services such as data desensitization and video cloud for various...

Weak Password Vulnerability in StarNet Intelligence SVG6000 Series Voice Gateway

As the core business unit for intelligent communications under StarNet Ruijie, StarNet Intelligence is a leading provider of converged communications solutions in China. A weak password vulnerability exists in the SVG6000 series voice gateway of Starnet Intelligence. An attacker can use the weak...

A week in security (June 7 – June 13)

Last week on Malwarebytes Labs: Amazon SIdewalk starts sharing your WiFi data tomorrow, thanks White hat, black hat, grey hat hackers: what’s the difference? Can two VPN “wrongs” make a right? Lock and Code S02E10 DOJ recovers pipeline ransom, signals more aggressive approach to cybercrime 800...

XSS Vulnerability in Hutchinson Cloud PC Client

HeCaiYun is China Mobile's personal online disk, providing personal cloud storage services for all users. There is an XSS vulnerability in the PC client of HeCaiYun, which can be exploited by attackers to obtain user cookie information...

New Cyber Espionage Group Targeting Ministries of Foreign Affairs

Cybersecurity researchers on Thursday took the wraps off a new cyber espionage group that has been behind a series of targeted attacks against diplomatic entities and telecommunication companies in Africa and the Middle East since at least 2017. Dubbed "BackdoorDiplomacy," the campaign involves...

SQL Injection Vulnerability in Residency Capacity Building System of Chongqing Yuanqiu Technology Co.

Chongqing Yuanqiu Science and Technology Co., Ltd. is an independent legal entity under the Southwest Information Center of the Ministry of Science and Technology, which is a large-scale intelligence service organization engaged in the collection of medical information and the development of...

Weak Password Vulnerability in United Sky Communications Reporter

hereinafter referred to as "Tiangong Network" is a leading data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. A weak password vulnerability exists in t...

SQL Injection Vulnerability in Fujian SiChuang Software Flash Flood Monitoring and Early Warning System

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. It specializes in providing disaster prevention and mitigation emergency command system solutions for the government, disaster prevention and mitigation...

Unauthorized Access Vulnerability in WV-SPN310V at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPN310V, which can...

Unauthorized Access Vulnerability in WV-SPW611L at Panasonic (China) Co.

Panasonic China Co., Ltd. was established in 1994 and is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPW611L, which can be...

Unauthorized Access Vulnerability in WV-SPN310 and WV-SPN310A at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPN310 and...

Unauthorized Access Vulnerability in WV-SW152 at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in WV-SW152 of Panasonic China Co. An attack...

Unauthorized Access Vulnerability in WV-SW458 at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in WV-SW458 of Panasonic China Co. An attack...

Information Disclosure Vulnerability in lenovonet Reporting Center

Ltd. "TGN" is a data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. Its predecessor is the R&D team of the Network Division of Lenovo Group, which was...

Unauthorized Access Vulnerability in WV-SPW532L at Panasonic (China) Co.

Established in 1994, Panasonic Corporation China Limited is responsible for carrying out activities such as sales and after-sales service of home appliances, systems, environments, components and other goods. An unauthorized access vulnerability exists in Panasonic China Co. WV-SPW532L, which can...