JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the parameter storecode...

JeeWMS 注入漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. An injection vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from SQL injection in the saveOrUpdate function...

JeeWMS 安全漏洞

JeeWMS is a JAVA-based warehouse management system from China Huayi JeeWMS. A security vulnerability exists in JeeWMS 20241229 and earlier versions, which stems from vulnerability to path traversal attacks...

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan

Japan's National Police Agency NPA and National Center of Incident Readiness and Strategy for Cybersecurity NCSC accused a China-linked threat actor named MirrorFace of orchestrating a persistent attack campaign targeting organizations, businesses, and individuals in the country since 2019. The...

编号撤回

ASUS GPU Tweak is a GPU tuning tool from Asus China. This CVE number has been withdrawn...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2025-00954)

Foxit PDF Reader is China Foxit Foxit company a PDF reader. Foxit PDF Reader suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, resulting in a memory corruption condition that can be exploited by a remote attacker to execute code in the...

Apple May Owe You $20 in a Siri Privacy Lawsuit Settlement

Plus: The FBI discovers a historic trove of homemade explosives, new details emerge in China’s hack of the US Treasury Department, and more...

ASUS AiCloud 安全漏洞

ASUS AiCloud is a router control program from Asus China. A security vulnerability exists in ASUS AiCloud. An attacker could execute arbitrary commands by exploiting the vulnerability...

US Treasury Department Admits It Got Hacked by China

Treasury says hackers accessed “certain unclassified documents” in a “major” breach, but experts believe the attack’s impacts could prove to be more significant as new details emerge...

ClassCMS Code Injection Vulnerability

ClassCMS is China ClassCMS open source a simple , flexible , secure , easy to expand the content management system . ClassCMS 4.8 version of the code injection vulnerability , an attacker can exploit the vulnerability leads to cross-site scripting attacks...

Winmail Server 安全漏洞

Winmail Server is a server-side application used to provide mail services by China Huazhao Winmail Company. A security vulnerability exists in Winmail Server version 4.4, which stems from the inclusion of a cross-site scripting vulnerability...

Researchers Uncover Espionage Tactics of China-Based APT Groups in Southeast Asia

A suspected China-based threat actor has been linked to a series of cyber attacks targeting high-profile organizations in Southeast Asia since at least October 2023. The espionage campaign targeted organizations in various sectors spanning government ministries in two different countries, an air...

WAVLINK WN531P3 Hardcoded Vulnerability

WAVLINK WN531P3 is a router developed by China RuiYin Technology WAVLINK. The WAVLINK WN531P3 suffers from a hard-coded vulnerability that can be exploited by an attacker to submit a special request to access the system as root...

Google Pixel 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Kernel component. An attacker can exploit the vulnerability to gain elevation of privilege...

CVE-2024-51114

An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the code/function/dpi/webauth/customizable.php file...

PT-2024-34527 · Beijing Digital China Yunke Information Technology Co.Ltd · Beijing Digital China Yunke Information Technology Co.Ltd

Name of the Vulnerable Software and Affected Versions: Beijing Digital China Yunke Information Technology Co.Ltd version 7.2.6.120 Description: An issue in Beijing Digital China Yunke Information Technology Co.Ltd allows a remote attacker to execute arbitrary code via the code/function/dpi/web...

Digital China Networks vendor 安全漏洞

Digital China Networks vendor is a series of vendor firewalls from Digital China Networks DCCN, a Chinese company. A security vulnerability exists in Digital China Networks vendor version v.7.2.6.120, which originates from a vulnerability that could allow a remote attacker to execute arbitrary co...

CVE-2024-51114

An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the code/function/dpi/webauth/customizable.php file...

CVE-2024-51114

An issue in Beijing Digital China Yunke Information Technology Co.Ltd v.7.2.6.120 allows a remote attacker to execute arbitrary code via the code/function/dpi/webauth/customizable.php file...

CVE-2024-51114

Beijing Digital China Yunke Information Technology Co. Ltd. v.7.2.6.120 is affected by CVE-2024-51114. The issue allows a remote attacker to execute arbitrary code via the file code/function/dpi/web_auth/customizable.php, indicating a remote-code-execution vulnerability. The available description...