SQL Injection Vulnerability in Xiaowei OA v2.0

Xiaowei OA system is Beijing Xiaowei Help Technology Co., Ltd. to provide mobile office platform for small and medium-sized enterprises. SQL injection vulnerability exists in Xiaowei OA v2.0, which can be exploited by attackers to obtain sensitive information from the database...

HPE Intelligent Management Center PLAT Arbitrary Code Execution Vulnerability (CNVD-2017-215922)

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. An arbitrary code execution...

Facebook Covertly Launches A Photo-Sharing App In China

The Chinese market is no doubt a pot of gold for big technology giants with over 700 million internet users, but the Chinese government heavily controls the Internet within its borders through its Golden Shield project – the Great Firewall of China. The Great Firewall has blocked some 171 out of...

August 9, 2017 – Morning Cyber Coffee Headlines – “Jesse Owens” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! August 9, 2017 - Headlines Take Down: Hackers Looking to Shut Down Factories fo...

Two Popular IP Cameras Riddled With Vulnerabilities

Two consumer-grade IP-enabled security cameras manufactured by Loftek and VStartcam are riddled with nearly two dozen vulnerabilities that expose them to remote attacks. According to researchers, more than 1.3 million of the cameras are in use today, with 200,000 models located in the United...

Shenzhen, China, a manufacturer of smart cameras exposed vulnerability: at least 17.5 million devices can be remote attack-vulnerability warning-the black bar safety net

Security firms Bitdefender and Checkmarx are released report, security researcher at a plurality of conventional smart cameras found in a remote intrusion vulnerability, relates to the VStarcam, the Loftek, as well as Neo IP camera. One of Neo IP camera is Shenzhen, China manufacturer beautiful...

Tiandy IP Cameras 5.56.17.120 - Sensitive Information Disclosure

Tiandy IP Cameras 5.56.17.120 - Sensitive Information Disclosure Vulnerability Summary The following advisory describes sensitive information Disclosure found in Tiandy IP cameras version 5.56.17.120 Tianjin Tiandy Digital Technology Co., Ltd Tiandy Tech is “one of top 10 leading CCTV manufacture...

super-electronics-china.com XSS vulnerability

Open Bug Bounty ID: OBB-271399 Description| Value ---|--- Affected Website:| super-electronics-china.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

China Telecom's WingCloud Campus app has logic design flaws

China Telecom's Wing Cloud Campus app is a campus integrated service mobile manager. A logical design vulnerability exists in China Telecom's Wing Cloud Campus app. An attacker can exploit the vulnerability to arbitrarily log in to the system...

Apple has removed all major VPN apps from Chinese App Store

By Carolina China is well known for its online censorship and surveillance This is a post from HackRead.com Read the original post: Apple has removed all major VPN apps from Chinese App Store...

Apple removes VPN Apps from the China App Store

In order to comply with Chinese censorship law, Apple has started removing all virtual private network VPN apps from the App Store in China, making it harder for internet users to bypass its Great Firewall. VPN service providers that provide services in China has accused the United States tech...

Fireball arrests made

Following some arrests in China, we may see a decrease in the amount of adware and adfraud hailing from the Rafotech labs. According to some reports 250 million machines may have been infected with one variant or another of Rafotechs’ products. We have shared some information about the potential...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

China arrests 11 hackers for infecting 250M devices with Fireball malware

By Waqas Law enforcement authorities in China have arrested eleven hackers suspected This is a post from HackRead.com Read the original post: China arrests 11 hackers for infecting 250M devices with Fireball malware...

Spring Dragon – Updated Activity

Spring Dragon is a long running APT actor that operates on a massive scale. The group has been running campaigns, mostly in countries and territories around the South China Sea, since as early as 2012. The main targets of Spring Dragon attacks are high profile governmental organizations and...

July 19, 2017 – Morning Cyber Coffee Headlines – “Rosetta Stone” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 19, 2017 - Headlines Cyberattack on Ukrainian Clinics, Pharmacies Worries...

July 18, 2017 – Morning Cyber Coffee Headlines – “Thomas Edison” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 18, 2017 - Headlines U.S. House Panel to Consider Self-Driving Car...

Code Execution Vulnerability in China Knowledge Network CAJViewer Reader

China Knowledge CAJViewer Reader is a specialized full-text format reader for China Journal Network. A code execution vulnerability exists in CAJViewer. The vulnerability is due to insufficient program processing logic, an attacker can construct a specific string to control the address of the...

Cajviewer suffers from a stack overflow vulnerability

cajviewer reader is a special full-text format reader for China Journal Network. Cajviewer has a stack overflow vulnerability when processing caj files, which can be exploited by an attacker to cause a denial of service or execute arbitrary script code...

Google Android media framework denial of service vulnerability (CNVD-2017-15982)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android. A remote attacker can exploit this...