Apache HTTP Server components to mention the right vulnerability alerts-a vulnerability alert-the black bar safety net

Recently, the Aapche HTTP Server official release of the Aapche HTTP Server 2.4.39 version update, this version fixes a bug number for CVE-2019-0211 mention the right vulnerability, the vulnerability rating of high risk, according to Sangfor security team, the vulnerabilities impact severity, the...

Arbitrary file deletion vulnerability in Tongda OA system (CNVD-2019-12765)

Tongda OA 2017 version is an office software system. Tongda OA system has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

CVE-2019-6282

ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password...

"an" App for iOS Directory Traversal Vulnerability

"an" App for iOS is an app. A directory traversal vulnerability exists in "an" App for iOS. A remote attacker can exploit this vulnerability to obtain arbitrary files...

Vulnerability of universal password login in the background of website building system of Guangzhou Yongtuo Information Technology Co.

Guangzhou Yongtuo Information Technology Co., Ltd. website building system is a website building system. There is a universal password login vulnerability in the background login page of Guangzhou Yongtuo Information Science and Technology Co...

Google Chrome Type Obfuscation Vulnerability (CNVD-2019-23326)

Chrome is a web browsing tool developed by Google. A type obfuscation vulnerability exists in V8 in versions prior to Google Chrome 73.0.3683.75. An attacker can exploit this vulnerability to perform out-of-bounds memory reads via a crafted HTML page...

Spam and phishing in 2018

Numbers of the year The share of spam in mail traffic was 52.48%, which is 4.15 p.p. less than in 2017. The biggest source of spam this year was China 11.69%. 74.15% of spam emails were less than 2 KB in size. Malicious spam was detected most commonly with the Win32.CVE-2017-11882 verdict. The...

SQL Injection Vulnerability in FlarumChina Frontend

FlarumChina is an open source Chinese version of Flarum forum software. A SQL injection vulnerability exists in FlarumChina version v0.1.0-beta.7C. A remote attacker can exploit this vulnerability by sending a request to execute SQL commands...

APT40: Examining a China-Nexus Espionage Actor

FireEye is highlighting a cyber espionage operation targeting crucial technologies and traditional intelligence targets from a China-nexus state sponsored actor we call APT40. The actor has conducted operations since at least 2013 in support of China’s naval modernization effort. The group has...

GPON Router Authentication Stack Overflow Vulnerability

GPON Gigabit-Capable PON technology is the latest generation of broadband passive optical integrated access standard based on the ITU-TG.984.x standard. Gigabit-Capable PON GPON technology is the latest generation of broadband passive optical integrated access standard based on ITU-TG.984.x...

Friday Squid Blogging: Chinese Squid-Processing Facility

China is building the largest squid processing center in the world. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

Moxa IKS and EDS Plaintext Password Storage Vulnerability

Moxa IKS and EDS is a series of industrial switches introduced by Moxa. A plaintext password storage vulnerability exists in the Moxa IKS and EDS series. The vulnerability stems from a program storing passwords in plaintext form. An attacker could exploit this vulnerability to read sensitive...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

Denial of service vulnerability in SGO South satellite navigation data decoding software

Guangzhou Nanfang Satellite Navigation Instrument Co., Ltd. is subordinate to Nanfang Surveying and Mapping Group, and is the first national high-tech enterprise in China that has passed through the high-precision GNSS technology industry chain and realized large-scale and market-oriented...

Starbucks: XXE at ecjobs.starbucks.com.cn/retail/hxpublic_v6/hxdynamicpage6.aspx

Description: Hi,guys,when i was visited the jobs of starbucks websites in Chinahttps://ecjobs.starbucks.com.cn, i found a features of uploaded user's photo.Thought the bypass the security restrictions of upload,i can upload html|xhtml|xml|config files etc.The uploaded html file can realize the...

Huawei Mate20 Buffer Overflow Vulnerability

Huawei Mate20 is a smartphone from Chinese company Huawei Huawei. A buffer overflow vulnerability exists in previous versions of the Huawei Mate20 HMA-AL00C00B175, which stems from a failure to adequately validate user input and can be exploited by an attacker to cause a device anomaly...

China Unicom's router gateway device suffers from information leakage vulnerability

China United Network Communications Group Corporation "China Unicom" is a telecommunications operator in China. An information leakage vulnerability exists in a router gateway device of China Unicom. The gateway's management page allows external network access, which can be used to obtain...

Chinese facial recognition database tracking Muslims left exposed

By Waqas China is often held responsible for conducting surveillance campaigns and espionage activities discreetly not only on its citizens but governments across continents. Now, a misconfigured facial recognition database has emerged that confirms the allegations put forth against China...

Microsoft Edge Buffer Overflow Vulnerability

Microsoft Edge is a web browser from Microsoft USA that is the default browser that comes with the Windows 10 operating system. A buffer overflow vulnerability exists in Microsoft Edge that stems from a program not properly accessing objects in memory. An attacker can exploit the vulnerability to...

Lenovo Watch X Riddled with Security Vulnerabilities

Researchers are raking the Lenovo Watch X over the security coals in a report that blasts the device for shipping with a half dozen “disturbing” privacy and security vulnerabilities. The budget $50 smartwatch was introduced in June 2018 and was initially praised for its design, features and...