SQL Injection Vulnerability in Telecom Gateway Configuration Management System it***_im***_po***.php Page

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A SQL injection vulnerability exists in the itimpo.php page of the Telecom Gateway Configuration Management System, which can be exploited by attackers to...

Weak password vulnerability in VRM of Bosch (China) Investment Co.

Bosch China Investment Co., Ltd. operates in the fields of machinery manufacturing, light industry, electronics and information industry. A weak password vulnerability exists in the VRM of Bosch China Investment Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Hello Ransomware Uses Updated China Chopper Web Shell, SharePoint Vulnerability

We discuss the technical features of a Hello ransomware attack, including its exploitation of CVE-2019-0604 and the use of a modified version of the China Chopper web shell...

Logic Flaw Vulnerability in Firefighting Level 1 Platform of China Fire Cloud Technology Co.

Ltd. is a company that invests, builds and operates smart city security and emergency service projects based on Internet of Things, cloud computing and big data. The smart city security and emergency service projects cover the fields of emergency response, law and order, security supervision, fir...

Command Execution Vulnerability in Telecom Gateway Configuration Management System Backend

Founded in September 2000, China Telecom Group Corporation China Telecom is a large state-owned telecommunications company and a global partner of the Shanghai World Expo. A command execution vulnerability exists in the backend of the Telecom Gateway Configuration Management System. An attacker c...

SQL Injection Vulnerability in Public Service Platform for Tenders and Bids

China Bidding Public Service Platform Co., Ltd. in the National Development and Reform Commission under the guidance and promotion of the China Bidding and Tendering Association, led by eight enterprises jointly invested in the establishment of public service enterprises. There is a SQL injection...

Prometei Botnet Could Fire Up APT-Style Attacks

A heretofore little-seen botnet dubbed Prometei is taking a page from advanced persistent threat APT cyberattackers: The malware is exploiting two of the Microsoft Exchange vulnerabilities collectively known as ProxyLogon, in order to drop a Monero cryptominer on its targets. It’s also highly...

Prometei Botnet Exploiting Unpatched Microsoft Exchange Servers

Attackers are exploiting the ProxyLogon Microsoft Exchange Server flaws to co-opt vulnerable machines to a cryptocurrency botnet named Prometei, according to new research. "Prometei exploits the recently disclosed Microsoft Exchange vulnerabilities associated with the HAFNIUM attacks to penetrate...

Weak Password Vulnerability in DCME-120 of Beijing Digital China Yunko Information Technology Co.

DCME-120 is a new-generation high-performance Internet egress gateway launched by Digital China Cloud Information Technology Co., Ltd. using MIPS multi-core high-performance processors to meet the business needs of multiple users, multiple traffic and multiple service types. A weak password...

Weak Password Vulnerability in Telecom Gateway Configuration Management Backend at China Telecom Group Corporation Ltd.

Founded in September 2000, China Telecom Group Corporation is a mega state-owned communications enterprise in China and a global partner of the Shanghai World Expo. A weak password vulnerability exists in the configuration management backend of China Telecom Group Corporation's telecom gateway,...

Take action! Multiple Pulse Secure VPN vulnerabilities exploited in the wild

Pulse Secure has alerted customers to the existence of an exploitable chain of attack against its Pulse Connect Secure PCS appliances. PCS provides Virtual Private Network VPN facilities to businesses, which use them to prevent unauthorized access to their networks and services. Cybersecurity...

Pulse Secure Critical Zero-Day Security Bug Under Active Exploit

A critical zero-day security vulnerability in Pulse Secure VPN devices has been exploited by nation-state actors to launch cyberattacks against U.S. defense, finance and government targets, as well as victims in Europe, researchers said. Download “The Evolution of Ransomware” to gain valuable...

编号撤回

This CVE number has been withdrawn...

Weak password vulnerability in AC centralized management platform of China Construction Zhiyun Network Communications Co.

CCTC Zhiyun Network Communications Co., Ltd. is a service provider specializing in the research and development, production, sales and service of network communications equipment, and providing network security, routers, switches, firewalls, wireless AP coverage and other network products and...

Weak password vulnerability in China Telecom's NB-IOT smart device management platform

China Telecom NB-IOT Smart Device Management Platform is an IoT management platform. A weak password vulnerability exists in China Telecom's NB-IOT Smart Device Management Platform, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in AKCMS

AKCMS is the most famous lightweight CMS builder in China. AKCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

Tenda G1 and G3 OS Command Injection Vulnerability

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to OS command injection, which can be exploited to execute arbitrary OS commands via a crafted "action umountUSBPartition" request. operating system commands via a crafted "action umountUSBPartition" request...

CISA and CNMF Analysis of SolarWinds-related Malware

CISA and the Department of Defense DoD Cyber National Mission Force CNMF have analyzed additional SolarWinds-related malware variants—referred to as SUNSHUTTLE and SOLARFLARE. One of the analyzed files was identified as a China Chopper webshell server-side component that was observed on a network...

The FBI Takes a Drastic Step to Fight China’s Hacking Spree

The agency's approach to protecting vulnerable victims of the recent Hafnium attack manages to be at once controversial and refreshingly restrained...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. There is a security vulnerability in Junos OS. No information about this vulnerability is available at this...