Zhuhai Innovation China website building system backstage login there are logic flaws vulnerability

Zhuhai Innovation Network Technology Co., Ltd. is committed to the application of the Internet, e-commerce platform operation, website construction and maintenance, micro letter public number and small program development. Zhuhai innovation China station building system background login there is ...

China Attacks Hong Kong Protesters With Fake Social Posts

Twitter and Facebook say they’ve taken down misinformation campaigns from China that cast pro-democracy activists as ISIS members and cockroaches...

GAME OVER: Detecting and Stopping an APT41 Operation

In August 2019, FireEye released the “Double Dragon” report on our newest graduated threat group, APT41. A China-nexus dual espionage and financially-focused group, APT41 targets industries such as gaming, healthcare, high-tech, higher education, telecommunications, and travel services. APT41 is...

Adobe Acrobat/Reader Heap Overflow Vulnerability (CNVD-2019-28658)

Adobe Acrobat is a PDF editing software developed by Adobe.Adobe Reader also known as Acrobat Reader is a PDF file reader developed by Adobe. A heap overflow vulnerability exists in Adobe Acrobat/Reader. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2019-29265)

Adobe Acrobat and Reader are the United States Odo than Adobe company's products. Adobe Acrobat is a set of PDF file editing and conversion tools. Reader is a set of PDF document reading software. Adobe Acrobat and Reader have a buffer overflow vulnerability. An attacker could exploit this...

Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability (CNVD-2019-27325)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Services...

CVE-2019-5238

Huawei PCManager with the versions before 9.0.1.66 Oversea and versions before 9.0.1.70 China have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information...

CVE-2019-5238

Huawei PCManager with the versions before 9.0.1.66 Oversea and versions before 9.0.1.70 China have a code execution vulnerability. Successful exploitation may cause the attacker to execute code and read/write information...

XML Entity Injection Vulnerability in S-CMS

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS has an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive information...

cPanel Security Feature Issue Vulnerability (CNVD-2019-29632)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 62.0.4. No detailed vulnerability details are provided at this time...

cPanel Injection Vulnerability (CNVD-2019-29634)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker can exploit the vulnerability to execute...

cPanel Code Execution Vulnerability (CNVD-2019-26349)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 62.0.17. An attacker can exploit this vulnerability to execu...

cPanel Input Validation Error Vulnerability (CNVD-2019-33872)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in cPanel. Detailed vulnerability details are not available at this time...

Google Chrome suffers from an unspecified vulnerability (CNVD-2019-26523)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions of Google Chrome prior to 76.0.3809.87. The vulnerability can be exploited by an attacker to obtain sensitive information by tricking a user into visiting a specially crafted website...

How the West Got China's Social Credit System Wrong

It occupies a spot next to 'Black Mirror' and Big Brother in popular imagination, but China’s social credit project is far more complicated than a single, all-powerful numerical score...

Information leakage vulnerability in webplus pro

Webplus pro is a content management system. An information disclosure vulnerability exists in webplus pro, which can be exploited by attackers to obtain sensitive information...

Starbucks: China – Limited Partner PII Regarding Work Scheduling via Unauthenticated API Endpoint

0xpatrik discovered an unauthenticated API endpoint that allowed retrieval of specified work leave dates of designated Starbucks employees in China. @0xpatrik — thank you for reporting the original vulnerability and for confirming the resolution...

Foxit PhantomPDF Code Issue Vulnerability

Foxit PhantomPDF is China's Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit PhantomPDF versions prior to 8.3.10. An attacker could exploit this vulnerability to corrupt memory...

Htek UC902 VoIP phone Buffer Overflow Vulnerability

Htek UC902 VoIP phone is an IP phone from China Hanlong Technology Htek. A buffer overflow vulnerability exists in the web management interface in the Htek UC902 VoIP phone using firmware version 2.0.4.4.46. The vulnerability originates when a network system or product performs operations on memo...

Rockwell Automation PanelView 5510 Access Control Error Vulnerability

Rockwell Automation PanelView 5510 is a graphic terminal device from Rockwell Automation. An access control error vulnerability exists in the PanelView 5510 manufactured before 2019-3-13. The vulnerability stems from a network system or product not properly restricting access to resources from...