Denial of Service Vulnerability in WR740N of China P&L Technology Limited (CNVD-2020-45179)

China P&T is a leading global provider of network communication equipment. A denial-of-service vulnerability exists in the WR740N of China P&L Technology Limited, which can be exploited by an attacker to cause a denial of service on the server...

Denial of Service Vulnerability in WR740N of China P&L Technology Limited (CNVD-2020-45177)

China P&T is a leading global provider of network communication equipment. A denial-of-service vulnerability exists in the WR740N of China P&L Technology Limited, which can be exploited by an attacker to cause a denial of service...

Denial of Service Vulnerability in WR740N of China P&L Technology Co.

China P&T is a leading global provider of network communication equipment. A denial-of-service vulnerability exists in the WR740N of China P&L Technology Limited, which can be exploited by attackers to cause a denial of service on the system...

china-consortium.com Cross Site Scripting vulnerability OBB-1207333

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Py-EVM Security Vulnerability

Py-EVM is a Python-based implementation of an Ethernet virtual machine. A security vulnerability exists in Py-EVM version 0.2.0-alpha.33. An attacker can exploit the vulnerability to cause a denial of service...

Denial of Service Vulnerability in WebAccess Node at Advantech (China) Co.

WebAccess Node is a fully Internet Explorer-based HMI/SCADA monitoring software from Advantech China Co. A denial of service vulnerability exists in Advantech China WebAccess Node, which can be exploited by attackers to cause a denial of service...

XSS Vulnerability in Bole Card Issuance System of Zunyi Xintengda Information Technology Co.

Zunyi Xintengda Information Technology Co., Ltd. is a professional e-commerce operation and network marketing services company. Zunyi Xintengda Information Technology Co., Ltd. Bole card issuance system has an XSS vulnerability, which can be exploited by attackers to obtain sensitive information...

Extreme OFFICE 2019 suffers from a buffer overflow vulnerability in Beijing Haiteng Times Technology Co.

Extreme OFFICE 2019 is an independently controlled office learning software developed by Beijing Haiteng Times Technology Co. Ltd. Extreme OFFICE 2019 suffers from a buffer overflow vulnerability that can be exploited by an attacker to execute code or cause a denial of service...

Unspecified Vulnerability in Mattermost Server (CNVD-2020-35441)

Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server. No detailed vulnerability details are provided at this time...

Code Execution Vulnerability in CAYIN Technology CMS

CAYIN Technology CMS is a content management system CMS from CAYIN Technology in Taiwan, China. A security vulnerability exists in the 'ntpIp' parameter of the systemservice.cgi file in CAYIN Technology CMS version 11.0 and earlier. A remote attacker could exploit the vulnerability to execute cod...

Adobe Illustrator Buffer Overflow Vulnerability (CNVD-2020-36222)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Illustrator. An attacker could exploit this vulnerability to execute arbitrary code...

Century Star Network Limited website builder system suffers from SQL injection vulnerability

Century Star Network was founded in October 2004, mainly engaged in brand website construction, promotion service providers, for growing enterprises to provide one-stop information network marketing solutions. There is a SQL injection vulnerability in Century Star Network Limited's website buildi...

Twitter Disrupts Wide-Ranging Political Disinformation Campaigns

Twitter has taken down three separate nation-sponsored influence operations, attributed to the People’s Republic of China PRC, Russia and Turkey. Collectively the operations consisted of 32,242 bogus or bot accounts generating the content and various amplifier accounts that retweeted it. “Every...

Zoom Shut Down US-Based Activists at China's Request

Hackers for hire, a particularly ignominious phishing campaign, and more of the week’s top security news...

Multiple Huawei products improperly certified for vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in Huawei P30, P30 Pro and Tony-AL00B that stems from the program not properly authenticating the identity of the message sender. An attacker can exploit the vulnerability by...

Memory Corruption Vulnerability in WPS Office for Windows (CNVD-2020-34026)

WPS Office for Windows is the software of Zhuhai Kingsoft Office Software Co., Ltd, which can realize the text, table, presentation and many other functions commonly used in office software. A memory corruption vulnerability exists in WPS Office for Windows, which can be exploited by attackers to...

Phishing Attacks against Trump and Biden Campaigns

Google's threat analysts have identified state-level attacks from China. I hope both campaigns are working under the assumption that everything they say and do will be dumped on the Internet before the election. That feels like the most likely outcome...

Jinwei cell phone mall system backend existence of arbitrary file deletion vulnerability

Jinwei Mobile Mall is a mall management system for micro-business customers with public numbers. There is an arbitrary file deletion vulnerability in the background of the Jinwei Mobile Mall system. An attacker can use this vulnerability to traverse the files in any directory and delete any file ...

China and Iran Tried to Hack the Biden and Trump Campaigns

Plus: An iOS zero day, surveillance planes, and more of the week's top security news...

CMCC Tietong Suzhou Branch Yu Routing Qi Has Logic Flaw Vulnerability

The main business of CMRT Limited is communication technology, information system development, consulting services and construction project management. A logic flaw vulnerability exists in Yu Routing Qi of CMCC Suzhou Branch, which can be exploited by attackers to gain unauthorized access to the...