Russia asks Apple to remove Telegram Messenger from the App Store

Russia's communications regulator Roskomnadzor has threatened Apple to face the consequences if the company does not remove secure messaging app Telegram from its App Store. Back in April, the Russian government banned Telegram in the country for the company's refusal to hand over private...

MULTIPROG suffers from a buffer overflow vulnerability in processing LST files

MULTIPROG is the PLC programming software of TENGCONTROL TECHNOLOGY China. MULTIPROG has a buffer overflow vulnerability in the handling of LST files, where an attacker can cause a buffer overflow and arbitrary code execution by constructing a malformed LST file...

Foxit Reader Information Disclosure Vulnerability (CNVD-2018-10940)

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. An information disclosure vulnerability exists in the parsing of the U3D Model Node framework in Foxit Reader version 9.0.0.29935, which occurs when the program fails to properly validate user-submitted data. The...

Malicious Package

Overview Version 1.0.910 of cordova-plugin-china-picker contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 1.0.910 of this modul...

Threat Outbreak Alert RuleID32584: Email Messages Distributing Malicious Software on April 26, 2018

Medium Alert ID: 57612 First Published: 2018 April 30 14:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32584 may contain the following files: Name| Siz...

WECON Technology Co., Ltd. LeviStudio HMI Editor and PI Studio HMI Project Programmer

1. EXECUTIVE SUMMARY CVSS v3 5.9 ATTENTION : Low skill level to exploit. Vendor : WECON Technology Co., Ltd. WECON Equipment : LeviStudio HMI Editor, and PI Studio HMI Project Programmer Vulnerabilities : Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these...

Police locate suspect from a crowd of 60,000 using Facial Recognition

By Carolina In Southeast China, the police used facial recognition tech to This is a post from HackRead.com Read the original post: Police locate suspect from a crowd of 60,000 using Facial Recognition...

Override Access Vulnerability in DCMS Upload Management Page

Xiamen Sanwu Internet Technology Co., Ltd. is China's first "cloud computing"-based enterprise informatization services listed on the Growth Enterprise Market GEM. An unauthorized access vulnerability exists in the DCMS upload management page. An attacker can exploit the vulnerability to gain...

Drupalgeddon 2.0: Are Hackers Slacking Off?

Ever since March 28th, when Drupal published a patch for a RCE named Drupalgeddon 2.0 SA-CORE-2018-002/CVE-2018-7600, Imperva has been monitoring our cloud looking for hackers’ attempts to exploit the vulnerability, but found nothing. Until today. It somehow seems fitting that nefarious activity...

Microsoft Excel and Office Remote Code Execution Vulnerability

Microsoft Excel is one of the components of Microsoft's office software Microsoft office, a spreadsheet software written and run by Microsoft for computers with Windows and Apple Macintosh operating systems. A remote code execution vulnerability exists in Microsoft Excel and Office. The...

A Deep Dive into Database Attacks [Part IV]: Delivery and Execution of Malicious Executables through SQL Commands (MySQL)

In a previous post we covered different techniques for execution of SQL and OS commands through Microsoft SQL server that can be used for delivering and executing malicious payloads on the target system. In this post we’ll discuss the same topic for MySQL database. Creating an executable directly...

china-minpaku.com XSS vulnerability

Open Bug Bounty ID: OBB-587500 Description| Value ---|--- Affected Website:| china-minpaku.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Denial of service vulnerability in 2345 Security Guard driver file 2345Wrath.sys

2345 Security Guard is a computer security management software that integrates computer checkup, Trojan horse detection and killing, garbage cleaning, repairing system vulnerabilities, system acceleration, software management and other functions under the banner of Shanghai 2,3,4,5 Network...

search.china-pub.com XSS vulnerability

Open Bug Bounty ID: OBB-582468 Description| Value ---|--- Affected Website:| search.china-pub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site Scripting Vulnerability in China Mobile's Smart Butler Platform

Smart Butler Platform is a wifi platform under China Mobile. There is a cross-site scripting vulnerability in China Mobile's Smart Butler Platform, which allows attackers to maliciously insert script code through the url to gain access to sensitive information in the system...

Override access vulnerability in Spike's web version

Nail is a free multi-end platform for communication and collaboration created by Alibaba Group specifically for Chinese enterprises. Nail web version of the existence of bulk user override access vulnerability, an attacker can exploit the vulnerability bulk traversal of hundreds of millions of ui...

Suspected Chinese Cyber Espionage Group (TEMP.Periscope) Targeting U.S. Engineering and Maritime Industries

Intrusions Focus on the Engineering and Maritime Sector Since early 2018, FireEye including our FireEye as a Service FaaS, Mandiant Consulting, and iSIGHT Intelligence teams has been tracking an ongoing wave of intrusions targeting engineering and maritime entities, especially those connected to...

Android malware HenBox hits Xiaomi devices & minority group in China

By Waqas The IT security researchers at Palo Alto Networks’ Unit 42 This is a post from HackRead.com Read the original post: Android malware HenBox hits Xiaomi devices & minority group in China...

china-window.com XSS vulnerability

Open Bug Bounty ID: OBB-579564 Description| Value ---|--- Affected Website:| china-window.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

China-Linked APT15 Used Myriad of New Tools To Hack UK Government Contractor

CANCUN, Mexico – Researchers at NCC Group have discovered multiple backdoors on a UK government contractor’s computer systems designed to steal sensitive government and military data. The hack is tied to China-linked cyber espionage group APT15, which researchers said is utilizing many new tools ...