Tiandy IP cameras Sensitive Information Disclosure

Vulnerability Summary The following advisory describes sensitive information Disclosure found in Tiandy IP cameras version 5.56.17.120 Tianjin Tiandy Digital Technology Co., Ltd Tiandy Tech is “one of top 10 leading CCTV manufacturer in China and a global supplier of advanced video surveillance...

中兴集成多业务路由器-ZXR10 1800-2S 敏感信息泄露漏洞

介绍 ZXR10 1800-2S 路由器是中兴通讯推出的集路由、交换、无线、安全、 VPN 于一体的智能集成多业务路由器产品，凭借模块化、可扩展的系统架构，为用户构建智能、高效、可靠、灵活、易维的网络。 该路由器可广泛灵活的适用于大客户接入、 DCN、园区网、校园网、政企网的出口网关、企业的总部/分支接入、金融网点、移动办公室、行业网纵向网的汇聚/接入等网络。 CVE/CNVD/CNNVD & 厂商回应 CVE-2017-10930...

Threat Outbreak Alert RuleID30877: Email Messages Distributing Malicious Software on October 6, 2017

Medium Alert ID: 55541 First Published: 2017 October 6 18:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30877 may contain the following files: Name |...

calec.china-airlines.com XSS vulnerability

Vulnerable URL: https://calec.china-airlines.com/echeckint/echeckine.asp?country=--"=en Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

China Bans WhatsApp Messenger

Popular instant messaging app WhatsApp has already been struggling for its existence in China ever since July when Chinese government blocked its users from sending photos and videos over the app. Now, it appears that China has largely blocked Facebook-owned WhatsApp in its latest step to tighten...

CCleaner Malware Infects Big Tech Companies With Second Backdoor

The group of unknown hackers who hijacked CCleaner's download server to distribute a malicious version of the popular system optimization software targeted at least 20 major international technology companies with a second-stage payload. Earlier this week, when the CCleaner hack was reported,...

Linux PDF rendering engine poppler suffers from a denial of service vulnerability

Poppler is used to generate a PDF of the C++ class library , from xpdf inheritance. Linux PDF rendering engine poppler Stream.cc ImageStream::ImageStream there is a denial-of-service vulnerability. Attackers can use this vulnerability to launch denial-of-service attacks...

Google Chrome heap buffer overflow vulnerability (CNVD-2017-31821)

Google Chrome is an open source web browser. Google Chrome WebGL suffers from a heap buffer overflow vulnerability that allows remote attackers to exploit the vulnerability by submitting a special WEB page, tricking the user into parsing it, and executing arbitrary code...

Multiple Lenovo Products ElanTech Touchpad Driver Elevation of Privilege Vulnerability

Lenovo 300S-11IBR and others are laptop products from the Chinese company Lenovo.ElanTech Touchpad driver is one of the touchpad drivers. A security vulnerability exists in the ElanTech Touchpad driver in several Lenovo products. The vulnerability can be exploited by an attacker to execute code...

How to install public store APP via Baidu Store

Users in China wants to know how to install public store APPs from Baidu stores...

Google Android Media Framework Information Disclosure Vulnerability (CNVD-2017-31353)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. An information disclosure vulnerability exists in the Android Media framework. An attacker can exploit thi...

Chinese Man Who Sold VPNs Gets 9 Months Prison Sentence

By Carolina In July this year, it was reported that Apple had removed This is a post from HackRead.com Read the original post: Chinese Man Who Sold VPNs Gets 9 Months Prison Sentence...

Chinese Man Jailed For Selling VPNs that Bypass Great Firewall

--- Image source: goldenfrog In an effort to continue its crackdown on VPNs, Chinese authorities have arrested a 26-year-old man for selling VPN software on the Internet. China's Supreme Court has sentenced Deng Jiewei from Dongguan in Guangdong province, close to Hong Kong, to nine months in...

China Bans Fundraising Through Initial Coin Offering (ICO)

China's central bank today announced an immediate ban on all ICO—Initial Coin Offering—fundraising, to prevent fraud and illegal fundraising. ICO is the hottest new thing in the blockchain world, which is an alternative to crowdfunding that lets a firm raise funding from multiple sources. The...

Unauthorized Access Vulnerability in China Mobile and Routing Apps

China Mobile He-Route APP is a cell phone supporting service software for He-Route. Unauthorized access vulnerability exists in China Mobile and Router APP. By analyzing the packet grabbing of the app to get the command interface to control the router, an attacker without administrator...

China Mobile and Routing App has ftp backdoor vulnerability

China Mobile He-Route APP is a cell phone supporting service software for He-Route. A ftp backdoor vulnerability exists in the China Mobile He-Route APP. The vulnerability is caused by writing ftp account passwords into the application. An attacker can use the vulnerability to obtain ftp account...

SQL injection vulnerability in OURPHP backend ourphp_callback.php page

OurPHP 傲派建站系统 is a website content management system developed using PHP language, the developer is Harbin Weicheng Technology Co. A SQL injection vulnerability exists in the background ourphpcallback.php page of OURPHP. Attackers can use this vulnerability to obtain sensitive database informatio...

China Enforces Real-Name Policy to Regulate Online Comments

If you reside in China, your Internet life within the borders will soon be even more challenging. Last Friday, China's top Internet regulator announced a new set of rules that would force citizens to post comments using their real-world identities on Internet forums and other web platforms. Yes,...

SQL Injection Vulnerability in City Lighting Wireless Control System of China Electronics Technology Group Corporation

China Electronics Technology Group Corporation CETC is a state-owned large-scale high-tech enterprise group established on the basis of electronic research institutes and high-tech enterprises directly under the former Ministry of Information Industry. A SQL injection vulnerability exists in the...

China Telecom's Care eTone for Android has logical design flaws

Based on China Telecom's CDMA network and "Wing Positioning" technology, Caring eTone is designed for middle and high-end users of Telecom to query the location information of their family members at any time through their Skywing 3G smartphones and to facilitate the search of information around...