Trump, Biden Campaign Staffers Targeted By APT Phishing Emails

With the U.S. presidential election months away, advanced persistent threat APT groups are targeting the campaign staffers of both Donald Trump and Joe Biden in recent phishing attacks. On Thursday, Shane Huntley with Google’s Threat Analysis Group said on Twitter that two separate phishing...

Google Android System Buffer Overflow Vulnerability (CNVD-2020-33220)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Android version 10, which can be exploited by an attacker to gain access to information...

EyouCMS 1.4.6 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: https://eyoucms.com Software Link:...

cas.chinaport.gov.cn Open Redirect vulnerability

Open Bug Bounty ID: OBB-1175027 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

EyouCMS 1.4.6 Cross Site Scripting

Exploit Title: EyouCMS 1.4.6 - Persistent Cross-Site Scripting Date: 2020-05-28 Exploit Author: China Banking and Insurance Information Technology Management Co.,Ltd. Vendor Homepage: https://eyoucms.com Software Link: https://qiniu.eyoucms.com/EyouCMS-V1.4.6-UTF8-SP2.zip Version: EyouCMS V1.4.6...

Command Execution Vulnerability in CFCA Front Office Back Office Management System

CICC Financial Certification Center Limited is a national authoritative security certification body. A command execution vulnerability exists in the backend management system of CFCA's front-end, which can be exploited by an attacker to gain control of a web server...

Extreme Viewing suffers from a heap overflow vulnerability (CNVD-2020-33238)

Extreme Viewer is the current ultra-fast and ultra-high-definition viewing software, compatible with all mainstream image formats and professional image formats. A heap overflow vulnerability exists, which can be exploited by an attacker to cause the software to crash...

Unauthorized Access Vulnerability in Serial Port Server of China Telecom Group Corporation Ltd.

China Telecom Group Limited serial port server can provide serial port to Internet role. An unauthorized access vulnerability exists in the China Telecom Group Limited Serial Port Server, which can be exploited by attackers to compromise confidentiality...

XSS Vulnerability in Chinese Online Digital Publishing Group Co.

Bookish China Station Building System is a reading platform that actively serves the development of national reading activities and extends to primary and secondary schools as well as colleges and universities and public libraries. There is an XSS vulnerability in the Chinese Online Digital...

Weak Password Vulnerability in Network Video Server of Longchamp Cintron

Ltd. is a provider of products and application solutions in the field of network video surveillance in China. A weak password vulnerability exists in the network video server, which can be exploited by an attacker to log in to the backend of the system...

XSS Vulnerability in the Health Collection and Reporting System of Shanxi Xianqi Technology Co.

Health Collection and Reporting System is a data management system developed using PHP+mysql. Shanxi Xianqi Technology Co., Ltd Health Collection and Reporting System has an XSS vulnerability that can be exploited by attackers to obtain an administrator cookie...

New US Electronic Warfare Platform

The Army is developing a new electronic warfare pod capable of being put on drones and on trucks. ...the Silent Crow pod is now the leading contender for the flying flagship of the Army's rebuilt electronic warfare force. Army EW was largely disbanded after the Cold War, except for short-range...

Advantech WebAccessNode Code Execution Vulnerability in Advantech Technology (China) Co.

Advantech China Co., Ltd. is a global manufacturer in the intelligent system industry. A code execution vulnerability exists in Advantech WebAccessNode of Advantech Technology China Co. Ltd. that can be exploited by an attacker to gain server administrator privileges...

Denial of Service Vulnerability in WPS Office 2019 Professional by Zhuhai Kingsoft Office Software Co.

Kingsoft WPS is office software from Kingsoft Office Software. A denial-of-service vulnerability exists in WPS Office 2019 Professional Edition by Zhuhai Kingsoft Office Software Ltd. that can be exploited by attackers to cause a denial of service...

Shantou Sanyu Technology Co., Ltd. website building system suffers from SQL injection vulnerability.

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

McAfee Endpoint Detection and Response Privileging Vulnerability (CNVD-2020-35070)

McAfee Endpoint Detection and Response EDR is a suite of endpoint threat detection and response solutions from the U.S.-based company McAfee McAfee. The product supports threat event monitoring, host traffic monitoring and automatic threat identification and other functions. A power lifting...

This Asia-Pacific Cyber Espionage Campaign Went Undetected for 5 Years

An advanced group of Chinese hackers has recently been spotted to be behind a sustained cyber espionage campaign targeting government entities in Australia, Indonesia, Philippines, Vietnam, Thailand, Myanmar, and Brunei—which went undetected for at least five years and is still an ongoing threat...

Command Execution Vulnerability in TOTOLINK A950RG Router

China Unicom Hong Kong Technology Limited is a manufacturer of network communication products. A command execution vulnerability exists in the TOTOLINK A950RG router, which can be exploited by attackers to execute arbitrary commands...

Command Execution Vulnerability in TOTOLINK T10 Router

China Unicom Hong Kong Technology Limited is a manufacturer of network communication products. A command execution vulnerability exists in the TOTOLINK T10 router, which can be exploited by attackers to execute arbitrary commands...

Adobe Illustrator 2020 Memory Corruption Vulnerability (CNVD-2020-25772)

Adobe Illustrator 2020 is one of the world's most recognized vector graphics software designed by Adobe. A memory corruption vulnerability exists in Adobe Illustrator 2020. An attacker can exploit the vulnerability to execute arbitrary code...