china-bluetec.cn Cross Site Scripting vulnerability OBB-1272978

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

china-tonc.com Cross Site Scripting vulnerability OBB-1272925

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

china-hehua.com Cross Site Scripting vulnerability OBB-1272912

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

china-best.com Cross Site Scripting vulnerability OBB-1272908

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Huawei P30 Denial of Service Vulnerability (CNVD-2020-52405)

Huawei P30 is a smartphone from Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei P30, which stems from incorrect resource management. An attacker can exploit this vulnerability for denial of service memory leak on the phone...

Airline DMARC Policies Lag, Opening Flyers to Email Fraud

More than half of global airlines do not have DMARC policies in place, opening their customers up to email fraud attacks, a new report found. DMARC Domain-based Message Authentication, Reporting & Conformance is considered the industry standard for email authentication to prevent attackers from...

Intel Graphics Drivers Buffer Overflow Vulnerability (CNVD-2020-49546)

Intel Graphics Drivers is an integrated graphics driver from Intel USA. A security vulnerability exists in Intel Graphics Drivers versions prior to 15.45.31.5127 and prior to 15.40.45.5126. An attacker can exploit this vulnerability to elevate privileges...

CS2 Network P2P Trust Management Issue Vulnerability

CS2 Network P2P is a P2P peer-to-peer networking platform. A security vulnerability exists in CS2 Network P2P 3.x and earlier versions. This vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack...

china-ef.com Cross Site Scripting vulnerability OBB-1256830

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

BBS forums suffer from SQL injection vulnerability

BBS Forum is a web application. BBS Forum has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Logic flaw vulnerability exists in cmseasy (CNVD-2020-51413)

EasTone enterprise website system alias CmsEasy is the only free WeChat + cell phone end + micro site + cell phone SMS + online sales + multi-language website combination of enterprise marketing management platform. CmsEasy has a logic flaw vulnerability that can be exploited by attackers to modi...

Buffer Overflow Vulnerability in Meitu Xiu Xiu PC Version

MeituShow is a free photo manipulation software. A buffer overflow vulnerability exists in Meitu Xiu Xiu for PC, which can be exploited by an attacker to cause a denial of service...

SQL Injection Vulnerability in Hanzhong Qiyuan Power Network Co.

Hanzhong Qiyuan Power Network Co., Ltd. is a high-tech Internet technology service provider. Hanzhong Qiyuan Power Network Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Black Hat 2020: Influence Campaigns Are a Cybersecurity Problem

Social media used as a cudgel for nation-states to sway opinion is a cybersecurity threat CISOs can’t ignore — and need to understand better and mitigate against. That’s the message from Renée DiResta, research manager at the Stanford Internet Observatory, who said she is seeing a steady growth a...

Stored Cross-site Scripting Vulnerability in PHPOK of Shenzhen Kunshuo Technology Co.

PHPOK system is a content management system for website construction developed by Shenzhen 锟铻科技有限公司formerly known as PHPOK Studio. A stored cross-site scripting vulnerability exists in PHPOK. The vulnerability can be exploited to obtain sensitive information such as administrator cookies...

QEMU Buffer Overflow Vulnerability (CNVD-2020-44638)

QEMU Quick Emulator is a set of simulation processor software by French software developer Fabrice Bellard. The software is fast, cross-platform and other characteristics. A buffer overflow vulnerability exists in the hw/net/xgmac.c file in the XGMAC Ethernet controller in versions prior to QEMU...

Black Hat USA 2020: VMware Carbon Black Releases Global Incident Response Threat Report Detailing Surge in Cyberattacks Amid COVID-19

At Black Hat USA this week, VMware Carbon Black unveils findings from the fifth installment of the semiannual Global Incident Response Threat Report, entitled: “COVID-19 Continues to Create a Larger Surface Area for Cyberattacks,” based on an online survey in April 2020 of forty-nine incident...

Denial of Service Vulnerability in Foxit Reader (CNVD-2020-46065)

Foxit Reader is a set of software used to read PDF format files, developed by Foxit Software Fujian. A denial of service vulnerability exists in Foxit Reader, which can be exploited by attackers to cause a denial of service...

EU sanctions hackers from China, Russia, North Korea who're wanted by the FBI

The Council of the European Union has imposed its first-ever sanctions against persons or entities involved in various cyber-attacks targeting European citizens, and its member states. The directive has been issued against six individuals and three entities responsible for or involved in various...

china-119.cn Cross Site Scripting vulnerability OBB-1242845

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...