Buffer Overflow Vulnerability in CAJViewer

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A buffer overflow vulnerability exists in CAJViewer. An attacker can exploit this vulnerability to cause a denial of service...

CAJViewer has an Arbitrary Address Read Vulnerability

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer has an arbitrary address read vulnerability. An attacker can exploit this vulnerability to obtain memory information at arbitrary addresses...

CAJViewer suffers from a type confusion vulnerability (CNVD-2020-65119)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. A type confusion vulnerability exists in CAJViewer. An attacker can exploit this vulnerability to cause a denial of service...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2020-65117)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause a denial of service...

Apple macOS Catalina Competitive Conditions Issue Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15.5, which originates from an application that can execute arbitrary code using kernel privileges. No details of the...

Memory Corruption Vulnerability in Hancom Office 2020 (CNVD-2020-65215)

Hancom Office 2020 is an online office program. Hancom Office 2020 suffers from a memory corruption vulnerability that can be exploited by attackers to cause a denial of service...

Unauthorized Access Vulnerability in China Mobile Communications Limited HG6821M

HG6821M is an optical cat. An unauthorized access vulnerability exists in the HG6821M. An attacker can exploit the vulnerability to obtain the administrator password of the device...

china-jm.org Cross Site Scripting vulnerability OBB-1460186

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

csas.china-led.net Cross Site Scripting vulnerability OBB-1454515

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Industrial Control Device Vulnerability in Rockwell Automation (China) Limited 1769-L30ER

Rockwell Automation, Inc. is one of the world's largest automation and information technology companies. A vulnerability exists in Rockwell Automation China Limited 1769-L30ER in industrial control devices, which can be exploited by an attacker to cause an I/O module to stop working and deny...

Lock and Code S1Ep18: Finding consumer value in Cybersecurity Awareness Month with Jamie Court

This week on Lock and Code, we discuss the top security headlines generated right here on Labs and around the Internet. In addition, we talk to Jamie Court, president of the non-profit advocacy group Consumer Watchdog, about the consumer value in Cybersecurity Awareness Month. Launched initially ...

monashuniversity.cn Cross Site Scripting vulnerability OBB-1450798

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Industrial Control Device Vulnerability in CJ2M-CPU11 at Omron Automation (China) Co.

The OMRON Group is a manufacturer of automation control and electronic equipment. A vulnerability exists in CJ2M-CPU11 of Omron Automation China Co. for industrial control devices. An attacker could exploit the vulnerability to cause control functions to stop, resulting in production interruption...

Did a Security Researcher Guess Trump’s Twitter Password?

Plus: An Among Us spam attack, China’s favorite vulnerabilities, and more of the week’s top security news...

Shenzhen Huazhou Intelligent Manufacturing Technology Co., Ltd. Huazhou Cloud Industrial Internet Platform Exists SQL Injection Vulnerability

Headquartered in Shenzhen, China, Huazhou Intelligence is committed to globalization and technological innovation, and has set up overseas offices and research institutes in Germany, Japan, the United States and other countries. With the Industrial Internet Platform as the core carrier, Huasic...

china-ccr.com Cross Site Scripting vulnerability OBB-1438460

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Potential for China Cyber Response to Heightened U.S.–China Tensions

Summary This Alert uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. Note : on October 20, 2020, the National Security Agency NSA released a cybersecurity advisory providing...

china-qmj.com Cross Site Scripting vulnerability OBB-1424483

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

ZZCMS suffers from a file upload vulnerability (CNVD-2020-59411)

ZZCMS is a content management system. A SQL injection vulnerability exists in the backend of ZZCMS2020, which can be exploited by attackers to gain control of the server...

china-aric.com Cross Site Scripting vulnerability OBB-1417875

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...