Uber: SQL Injection on sctrack.email.uber.com.cn

Hi, Uber Security team I just traveled to China, when I call Uber in China. I received an advertisement mail from Uber and I found the unsubscribe link is different from the original unsubscribe link, and there is a SQL Injection under the unsubscribe link. You can see where to find the unsubscri...

NSD Denial of Service Vulnerability

NSD is a high-performance open source name server. NSD suffers from a denial of service vulnerability. Because the NSD server fails to limit the size of the data transferred in the region, allowing a remote attacker can exploit the vulnerability to submit a special request for a denial-of-service...

APT Group 'Patchwork' Cuts-and-Pastes a Potent Attack

An advanced persistent threat tied to Southeast Asia and the South China Sea is targeting governments and entities around the world including the U.S. The attacks are unique, according to security experts, because the perpetrators are relying nearly 100 percent on computer code copied-and-pasted...

HummingBad Android Malware Connected to YiSpecter iOS Attacks

The same group of cybercriminals behind a strain of iOS malware uncovered last year have apparently diversified and now dabble in Android malware. The group, dubbed Yingmob, has been running a malware campaign named HummingBad that controls 10 million Android devices globally and rakes in $300,00...

Apple Patents Technology to remotely disable your iPhone Camera at Concerts

Here's something you'll not like at all: Apple has been awarded a patent for technology that would prevent you from snapping pictures and shooting videos with your iPhone or iPad at places or events, like concerts or museums, where it might be prohibited or inappropriate. The patent, granted on...

China Orders Apple to Monitor App Store Users and Track their Identities

China has long been known for its strict censorship which makes it difficult for foreign technology companies to do business in the world’s most populous country of over 1.35 billion people. Now, the new law issued by the Chinese government will expand its strict Internet monitoring efforts into...

Arbitrary Command Execution Vulnerability in a System of China Soft Technology

Ltd. is a product of the implementation of the pilot project of knowledge innovation by the Institute of Software of the Chinese Academy of Sciences, and is the result of the restructuring of the main body of the Institute's technological research and development. An arbitrary command execution...

Red Line Drawn: China Recalculates Its Use of Cyber Espionage

On Sept. 25, 2015, President Barack Obama and Chinese President Xi Jinping agreed that neither government would “conduct or knowingly support cyber-enabled theft of intellectual property” for an economic advantage. Some observers hailed the agreement as a game changer for U.S. and Chinese...

Red Line Drawn: China Recalculates Its Use of Cyber Espionage

On Sept. 25, 2015, President Barack Obama and Chinese President Xi Jinping agreed that neither government would “conduct or knowingly support cyber-enabled theft of intellectual property” for an economic advantage. Some observers hailed the agreement as a game changer for U.S. and Chinese...

Times bright China e-Learning system /resin-doc/examples/security-basic/viewfile parameter file arbitrary file read vulnerability

No description provided by source...

China Shipping Container Lines (Shanghai) Co.

China Shipping e-Pickup System is a product order system for transportation companies. A design logic vulnerability exists in the China Shipping e-Pickup System of China Shipping Container Lines Shanghai Co. Ltd. that allows an attacker to exploit the vulnerability to execute commands and view...

HDWiki 5.1 /control/user. php, etc. 2 SQL injection vulnerability

HDWiki description Interactive wiki open source systems HDWiki as China's first with independent intellectual property rights of the Chinese Wiki（Wiki）system, the interactive online（Beijing）Technology Co., Ltd. in 2006 to 11 November 28 the official launch, and strive for domestic and foreign man...

HDWiki 5.1 /control/doc.php SQL injection vulnerability

HDWiki description Interactive wiki open source systems HDWiki as China's first with independent intellectual property rights of the Chinese Wiki（Wiki）system, the interactive online（Beijing）Technology Co., Ltd. in 2006 to 11 November 28 the official launch, and strive for domestic and foreign man...

Patron Info System SQL Injection Vulnerability

Patron Info System is a customer information system. Patron Info System has a remote sql injection vulnerability that allows remote attackers to execute malicious sql commands to connect to dbms...

retailexport.ebay.cn XSS vulnerability

Open Bug Bounty ID: OBB-154134 Description| Value ---|--- Affected Website:| retailexport.ebay.cn Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Apple and FBI Faceoff at House Encryption Hearing

Representatives from Apple and the FBI testified Tuesday at a House Energy and Commerce Committee hearing on the ongoing encryption debate. Both vowed to work cooperatively to move past the current encryption impasse and find common ground. They also used the hearing to clarify stances on...

Multiple Lenovo LenovoEMC Devices Information Disclosure Vulnerability

Lenovo LenovoEMC EZ Media and Backup hm3 and others are firmware developed by the Chinese company Lenovo Lenovo for use in network storage devices. A security vulnerability exists in the management interface of several Lenovo LenovoEMC devices, which can be exploited by remote attackers to obtain...

WECON LeviStudio Buffer Overflow Vulnerabilities

OVERVIEW Independent security researchers Rocco Calvi and Brian Gorenc, working with Trend Micro’s Zero Day Initiative, have identified buffer overflow vulnerabilities in WECON’s LeviStudio software. WECON has not released a product fix to addresses the buffer overflow vulnerabilities in the...

Building the China Wall - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Building the China Wall published at the 'play' market has multiple vulnerabilities...

Air Quality China - Exported components, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Air Quality China published at the 'play' market has multiple vulnerabilities...