4438 matches found
WordPress Plugin Verge3D Publishing and E-Commerce Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Verge3D...
Record Management System Cross-Site Scripting Vulnerability
Record Management System is a record management system. A cross-site scripting vulnerability exists in Record Management System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...
Tenda M3 upgrade method buffer overflow vulnerability
Tenda M3 is an access controller from Tenda, China. A buffer overflow vulnerability exists in Tenda M3 version V1.0.0.124856, which is caused by the upgrade method failing to correctly validate the length of the input data, and can be exploited by a remote attacker to execute arbitrary code on th...
WordPress Plugin WordPress Job Board and Recruitment Plugin Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WordPress Job Board a...
WordPress Plugin Follow-Ups Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
china-restaurant-konz.de Improper Access Control vulnerability OBB-3818138
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
ZTE MC801A tcp port parameter buffer overflow vulnerability
The ZTE MC801A is a 5g indoor WiFi router from China's ZTE ZTE. The ZTE MC801A suffers from a buffer overflow vulnerability in the handling of tcp port parameters, which can be exploited by a remote attacker to submit a special request that can crash the application and cause a denial of service...
ZTE MC801A Command Injection Vulnerability
The ZTE MC801A is a 5g indoor WiFi router from China's ZTE ZTE. The ZTE MC801A suffers from an input validation vulnerability in the handling of multiple network parameters, which can be exploited by a remote attacker to submit a special request that can be used in the application context to...
ZTE MC801A and MC801A1 Web Interface Buffer Overflow Vulnerability
The ZTE MC801A/MC801A1 are both a 5g indoor WiFi router from China's ZTE ZTE. The ZTE MC801A and MC801A1 suffer from a buffer overflow vulnerability, which stems from insufficient validation of web interface parameters and can be exploited by attackers to conduct denial of service attacks...
Micro HTTP Server Security Vulnerability
Micro HTTP Server is a very simple HTTP server for prototyping by the individual developer Jian-Hong Pan in China. A security vulnerability exists in Micro HTTP Server that stems from allowing stack-based buffer overflows and potential remote code execution...
china-art.cz Improper Access Control vulnerability OBB-3814704
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
New KV-Botnet Targeting Cisco, DrayTek, and Fortinet Devices for Stealthy Attacks
A new botnet consisting of firewalls and routers from Cisco, DrayTek, Fortinet, and NETGEAR is being used as a covert data transfer network for advanced persistent threat actors, including the China-linked threat actor called Volt Typhoon. Dubbed KV-botnet by the Black Lotus Labs team at Lumen...
The Unseen Thread Linking Sandman APT and KEYPLUG Backdoor
Summary: The Sandman Advanced Persistent Threat APT is closely linked to suspected threat clusters originating from China, specifically identified as Storm-0866, also known as Red Dev 40. Within the same victim environments, the Sandmans Lua-based malware, LuaDream, and the KEYPLUG backdoor have...
Researchers Unmask Sandman APT's Hidden Link to China-Based KEYPLUG Backdoor
Tactical and targeting overlaps have been discovered between the enigmatic advanced persistent threat APT called Sandman and a China-based threat cluster that's known to use a backdoor referred to as KEYPLUG. The assessment comes jointly from SentinelOne, PwC, and the Microsoft Threat Intelligenc...
Story of the year: the impact of AI on cybersecurity
In the whirlwind of technological advancements and societal transformations, the term "AI" has undoubtedly etched itself into the forefront of global discourse. Over the past twelve months, this abbreviation has resonated across innumerable headlines, business surveys and tech reports, firmly...
Tenda AX3 Buffer Overflow Vulnerability (CNVD-2023-9804342)
Tenda Ax3 is an Ax1800 Gigabit Port Dual Band Wifi 6 Wireless Router from Tenda China. A buffer overflow vulnerability exists in Tenda AX3 version V16.03.12.11, which originates from the failure of the function setdevicename to correctly validate the length and size of the input data, and can be...
Huawei HarmonyOS DFR Module Authorization Issue Vulnerability
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an authorization issue vulnerability that stems from an interface without privilege checks in the DFR module. An attacker could...
China's bidding and tendering public service platform has information leakage vulnerability
China's bidding and tendering public service platform provides market public information services for bidding and tendering transaction platforms and parties, realizing the pooling, sharing, dynamics and openness of market information, and providing data support for regulating and supervising the...
