Juniper Networks Junos OS 竞争条件问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. There is a security vulnerability in Junos OS. No information about this vulnerability is available at this...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. There is a security vulnerability in Junos OS for which no information is available at this time, so please...

Logic Flaw Vulnerability in Campus Information Management System of China Telecom Group Corporation Ltd.

China Telecom Group Corporation is China's mega state-owned telecommunications enterprise and a global partner of the Shanghai World Expo. A logic flaw exists in the Campus Information Management System CIMS of China Telecom Group Corporation, which can be exploited by an attacker to reset a user...

Updates on Microsoft Exchange Server Vulnerabilities

CISA has added two new Malware Analysis Reports MARs to Alert AA21-062A: Mitigate Microsoft Exchange Server Vulnerabilities. MAR-10331466-1.v1: China Chopper Webshell identifies a China Chopper webshell observed in post-compromised Microsoft Exchange Servers. After successfully exploiting a...

Chinese Hackers Selling Intimate Stolen Camera Footage

Stolen videos captured by tens of thousands of security cameras at private properties throughout China are now for sale across social media, marketed as sex tapes. That’s according to the South China Morning Post, which reported that the cost of each “tape” varies, depending on how salacious the...

Vangene deltaFlow E-platform 安全漏洞

The Vangene deltaFlow E-platform is an application system from Vangene, China. Standard forms can be set up quickly in less than five minutes. A security vulnerability exists in the Vangene deltaFlow E-platform, which can be exploited by an attacker to remotely gain privileged access by tampering...

Binary Vulnerability in D-Link DIR-816 Router

The DIR-816 is a wireless router under the AUO D-Link brand, manufactured in mainland China. A binary vulnerability exists in the D-Link DIR-816 router, which can be exploited by attackers to cause a service program crash...

Facebook removes 100s of accounts for spreading iOS, Android malware

By Waqas The hackers were using malware campaigns to target iOS and Android devices used by Uyghurs living outside China including journalists. Facebook has removed accounts of hackers possibly backed by the Chinese government for targeting Uyghur community members living abroad. According to...

Chinese Hackers Used Facebook to Hack Uighur Muslims Living Abroad

Facebook may be banned in China, but the company on Wednesday said it has disrupted a network of bad actors using its platform to target the Uyghur community and lure them into downloading malicious software that would allow surveillance of their devices. "They targeted activists, journalists and...

Security Analysis Clears TikTok of Censorship, Privacy Accusations

Nebulous privacy and censorship criticisms about video social-media app TikTok have been swirling for months. Security analysts from CitizenLab are the first to collect real data on the platform’s source code, and reported that TikTok meets reasonable standards of security and privacy. The...

编号撤回

This CVE number has been withdrawn...

CopperStealer Malware Targets Facebook and Instagram Business Accounts

A malware that until now has gone undocumented has been quietly hijacking online accounts of advertisers and users of Facebook, Apple, Amazon, Google and other web giants since July 2019 and then using them for nefarious activity, researchers have found. Dubbed CopperStealer, the malware acts...

HGiga MailSherlock SQL Injection Vulnerability (CNVD-2021-25618)

Hgiga MailSherlock is a set of enterprise mail audit system from Henderson Hgiga, China. HGiga MailSherlock suffers from a SQL injection vulnerability, which stems from the lack of validation of externally entered SQL statements in database-based applications, and can be exploited by an attacker ...

Illegal Content and the Blockchain

Security researchers have recently discovered a botnet with a novel defense against takedowns. Normally, authorities can disable a botnet by taking over its command-and-control server. With nowhere to go for instructions, the botnet is rendered useless. But over the years, botnet designers have...

Use This One-Click Mitigation Tool from Microsoft to Prevent Exchange Attacks

Microsoft on Monday released a one-click mitigation software that applies all the necessary countermeasures to secure vulnerable environments against the ongoing widespread ProxyLogon Exchange Server cyberattacks. Called Exchange On-premises Mitigation Tool EOMT, the PowerShell-based script serve...

China Telecom's Skywatch Store Camera Has Information Leakage Vulnerability

Founded in September 2000, China Telecom is China's largest state-owned telecommunications company, the global partner of the Shanghai World Expo, and one of the world's top 500 companies for many years. China Telecom's Skywatch Store Camera suffers from an information leakage vulnerability that...

Unauthorized Access Vulnerability in China Mobile's MAS Mobile Proxy Server

Mobile Agent Server MAS is the abbreviation of Mobile Agent Server, is to assist the enterprise original business system to realize the wireless application of the access tool to achieve MAS access to the enterprise original business system can be convenient to realize the wireless application,...

Binary vulnerability in CAJViewer reader (CNVD-2021-22905)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in CAJViewer reader (CNVD-2021-22903)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...

Binary vulnerability in CAJViewer reader (CNVD-2021-22902)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A binary vulnerability exists in CAJViewer reader, which can be exploited by attackers to cause a denial of service attack...