NUS-M9 安全漏洞

NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which is caused by a SQL injection in the usercode parameter...

NUS-M9 安全漏洞

NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which is caused by an arbitrary file upload vulnerability in the /Production/UploadFile component. An attacker can exploit this vulnerability to execute arbitrary code by uploading a specially...

NUS-M9 安全漏洞

NUS-M9 is an ERP system from China Zhelin NUS Company. A security vulnerability exists in NUS-M9 v3.0.0, which is caused by an arbitrary file download vulnerability in the /Doc/DownloadFile component. The vulnerability can be exploited by an attacker to request the download of an arbitrary file a...

Sercomm Router Etisalat Model S3-AC2100 安全漏洞

Sercomm Router Etisalat Model S3-AC2100 is a router from China Zhonglei Electronics Sercomm. A security vulnerability exists in the Sercomm Router Etisalat Model S3-AC2100 that stems from an access control error...

D-Link DSL6740C 安全漏洞

The D-Link DSL6740C is a wireless VDSL router from China-based AUO D-Link. The D-Link DSL6740C suffers from a path traversal vulnerability that stems from the program failing to properly filter special elements in the path of a resource or file. An attacker could exploit this vulnerability to cau...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a memory leak...

07FLYCMS 安全漏洞

07FLYCMS is a free and open source content management system CMS from China Zero Takeoff 07FLY, which can be used independently to meet the needs of various types of enterprise website development and construction! A security vulnerability exists in 07FLYCMS version V1.3.9, which originates from...

SDCMS 安全漏洞

SDCMS is a PHP and MySQL based enterprise website content management system CMS from China Vivid Network SDCMS. A security vulnerability exists in SDCMS version 2.8, which originates from the theme.php file containing a command execution vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from memory reuse after release...

Lylme Spage 安全漏洞

LyLme Spage Six Zero navigation page is China Six Zero LyLme open source a navigation page . Committed to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

Digital China Networks DCME-320 安全漏洞

Digital China Networks DCME-320 is a wireless router from Digital China Networks China. A security vulnerability exists in the Digital China Networks DCME-320 version v7.4.12.90, which stems from vulnerability to command injection attacks...

Sophos Versus the Chinese Hackers

Really interesting story of Sophos's five-year war against Chinese hackers...

CHANGING IDExpert 安全漏洞

CHANGING IDExpert is an authentication system based on zero trust and integrating various mechanisms such as FIDO, biometrics, MFA, etc. from China-based CHANGING. A security vulnerability exists in CHANGING IDExpert versions 2.5 to 2.8, which originates from incorrectly validating specific...

New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics

Cybersecurity researchers have discovered an improved version of an Apple iOS spyware called LightSpy that not only expands on its functionality, but also incorporates destructive capabilities to prevent the compromised device from booting up. "While the iOS implant delivery method closely mirror...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from not checking the return value of the devmkasprintf function...

Microsoft Warns Foreign Disinformation Is Hitting the US Election From All Directions

Russia, Iran, and China are targeting the US election with an evolving array of influence operations in the last days of campaign season...

Xinhu RockOA 安全漏洞

Xinhu RockOA is an office OA system of China Xinhu Company. A security vulnerability exists in Xinhu RockOA v2.6.5, which originates from a directory traversal issue in webmain/system/beifen/beifenAction.php...

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

VMware has released software updates to address an already patched security flaw in vCenter Server that could pave the way for remote code execution. The vulnerability, tracked as CVE-2024-38812 CVSS score: 9.8, concerns a case of heap-overflow vulnerability in the implementation of the DCE/RPC...

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical security flaw impacting ScienceLogic SL1 to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation as a zero-day. The vulnerability in question, tracked as CVE-2024-9537 CV...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a null pointer being passed in the dcn20validateapplypipesplitflags function, which results in a null pointe...