Baidu, Alibaba, Tencent in the column: a“watering hole attack”using JSONP hijacking tracking user-vulnerability warning-the black bar safety net

Can you imagine if an authoritarian state to get a way to obtain user privacy information of the tool, and this tool can obtain the user in a specific site on the real name, email address, gender, birthday and phone number, etc., that would be what kind of scene? You can also imagine that an...

Hill Debates Course of Action on China Cyberespionage

Lawmakers and experts on the U.S.-China Economic and Security Review Commission today debated with and quizzed security and legal experts on the best course of action against cyberespionage attributed to China. The Senate committee heard pros and cons related to a number of possible scenarios...

Is China Behind the Massive Data Theft of 4 Million U.S. Officials?

The US federal agency has notified its 4 Million current and former government employees that their private data has been compromised in a massive data breach. Hackers managed to break into US government computer systems in the Office of Personnel Management OPM and steal records of Millions of...

Cross-site Scripting Vulnerability in Zhangzhou City, China's Imperial Xiang Xiang Xiang Software Empire Content Management Website Building System

Empire Content Management Building System is a secure, stable, powerful and flexible website management system based on B/S structure. Zhangzhou City, Fujian Xiang Xiang software empire content management station-building system cross-site scripting vulnerabilities, attackers can use the...

Hikvision DS-7108HWI-SH XML External Entity Injection Vulnerability

Hikvision DS-7108HWI-SH is a digital video recorder product from Hikvision. An XML external entity injection vulnerability exists in the Hikvision DS-7108HWI-SH, which allows an attacker to exploit the vulnerability to obtain sensitive information or conduct denial-of-service attacks via special...

MAS China Mobile Proxy Server SQL Injection Vulnerability

WAS China Mobile Proxy Server is a gateway that is deployed within the Intranet of group customers for application coupling with their OA, ERP, CRP and other application systems in order to satisfy the informatization needs of group customers who have a high degree of informatization to realize...

t1utils Buffer Overflow Vulnerability

t1utils is a library for manipulating PostScript Type 1 fonts. A buffer overflow vulnerability exists in t1utils that could be exploited by an attacker to execute arbitrary code or conduct a denial of service attack...

Elasticsearch Elastichoney Honeypot Shows 8,000 RCE Attacks

Hackers have taken an interest in Elasticsearch, a popular enterprise search engine. A researcher based in Texas, whose own Elasticsearch server was hacked, today published results collated from a honeypot he built to get a sense of how widespread attacks are against the vulnerability that did in...

Apple Mac OS X ATS fontd local elevation of privilege vulnerability

Apple Mac OS X is a popular operating system. Apple Mac OS X has a security vulnerability in ATS fontd that allows local attackers to exploit the vulnerability to elevate privileges...

The Great... Great... Firewall of China Hijacks Facebook Connect Plugin

From past few days, Internet Users in China are dealing with a weird redirection of traffic nationwide while accessing any website that makes use of connect.facebook.net resource. Great Firewall of China, which is infamous for the Internet censorship by Chinese government, believes to be...

PayPal Inc Bug Bounty #114 - JDWP RCE Vulnerability

Document Title: =============== PayPal Inc Bug Bounty 114 - JDWP RCE Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1474 Video: http://www.vulnerability-lab.com/getcontent.php?id=1474 Release Date: ============= 2015-04-28 Vulnerability...

Popular iOS network communications library AFNetworking exposed SSL vulnerability, the impact of China UnionPay, Bank of China, Bank of communications, 2. 5 million iOS applications-vulnerability warning-the black bar safety net

A presence in the popular open source iOS network communications library AFNetworking in severe vulnerability that the Apple App Store 2 5 0 0 0 a iOS app in HTTPS traffic exposure in-the-middle（MITM attack. AFNetworking is a famous open source network library, to be able to developers in iOS and...

Fedora abrt competitive conditions vulnerability

Fedora is an open, innovative and forward-thinking operating system and platform based on Linux.ABRT is an automated bug detection and reporting tool. A competitive condition vulnerability exists in Fedora abrt. An attacker can exploit this vulnerability to gain privileges...

China Using A Powerful 'Great Cannon' Weapon to Censor The Internet

China has something very impressive that we are not aware of. The country has a powerful and previously unknown weapon that its government is using to bolster their cyber attack capabilities: Dubbed "The Great Cannon." INTERNET CENSORSHIP IN CHINA When I talk about Internet censorship, it is...

Github Attack Perpetrated by China's Great Cannon Traffic Injection Tool

Chinese attackers used the Great Firewall’s offensive sister-system, named the Great Cannon, to launch a recent series of distributed denial of service attacks targeting the anti-censorship site, GreatFire.org, and the code repository, Github, which was hosting content from the former. The first...

DDoS Attack on GitHub Linked to Earlier One Against GreatFire.org

The ongoing DDoS attack on GitHub, which has made the social coding site intermittently unresponsive since March 25, is essentially a side effect of an older operation from the Chinese government against a site run by the anti-censorship project GreatFire.org. Officials at GreatFire said that the...

GitHub hit by Massive DDoS Attack From China

Github – a popular coding website used by programmers to collaborate on software development – was hit by a large-scale distributed denial of service DDoS attack for more than 24 hours late Thursday night. It seems like when users from outside countries visit different websites on the Internet th...

GitHub Hit With DDoS Attack

A large-scale DDoS attack, apparently emanating from China, has been hammering the servers at GitHub over the course of the last 12 hours, periodically causing service outages at the code-sharing and collaboration site. The attack appears to have begun around 2 AM UTC on Friday and has been going...

CA Tied to Chinese Registrar Issued Unauthorized Google Certificates

Google security engineers, investigating fraudulent certificates issued for several of the company’s domains, discovered that a Chinese certificate authority was using an intermediate CA, MCS Holdings, that issued the unauthorized Google certificates, and could have issued certificates for...

Citrix Netscaler NS10.5 HTTP Header Contamination WAF Bypass Vulnerability

Citrix NetScaler is a network traffic management product A security vulnerability exists in Citrix NetScaler that allows attackers to exploit a vulnerability to bypass WAF protection via HTTP header pollution for unauthorized access...