Chinese-Cybercrime-Research

Chinese Cybercrime Research Resources to learn more about Chinese-language cybercrime actors. Phishing Phishing Kits YYlaiyu https://cloud.google.com/blog/topics/threat-intelligence/chinese-language-phishing-services https://spycloud.com/blog/yylaiyu-chinese-phishing-as-a-service-panel/...

Flash-player

Fake-flash.cn www.flash.cn 的钓鱼页，中文+英文 在线预览：http://fake-flash.se7ensec.cn/...

CVE-2021-26856

I have translated the chinese exploit at https://github.com/jsdryan/CVE-2021-26855 for english reader and people unfamiliar with golang just look at the png pictures...

CVE-2024-37051-EXP

CVE-2024-37051-EXP CVE-2024-37051 poc and exploit See PR 1: https://github.com/LeadroyaL/CVE-2024-37051-EXP/pull/1 Chinese vulnerability analysis: https://leadroyal.cn/p/2403/...

C2-detection-manjusaka

Detecting the "Manjusaka" C2 framework Detecting the C2 framework Manjusaka: "A Chinese sibling of Sliver and Cobalt Strike" References: Detection logic details: https://corelight.com/blog/detecting-manjusaka-c2-framework Writeup by Talos:...

CVE-2026-112080

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

EUVD-2026-104068

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

PT-2026-117224

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get class from dynamic module of the file examples/chat gradio no merge.py of the component Adapter Config. The manipulation of the argument base model name...

CVE-2026-112080: Improper Control of Generation of Code

A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function getclassfromdynamicmodule of the file examples/chatgradionomerge.py of the component Adapter Config. The manipulation of the argument basemodelnameorpath...

nuclei

English • 中文 • Korean • Indonesia • Spanish • 日本語 • Portuguese • Türkçe...

CVE-2026-75940

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information...

CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

CVE-2026-18994

A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...

CVE-2026-75940

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information...

CVE-2026-75940

A vulnerability was reported in Lenovo Health Android Application, distributed exclusively in the Chinese market, that could allow an attacker to access sensitive health-related information...

U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok

U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence AI companies of conducting "systematic extraction" of proprietary functionalities and capabilities of American frontier models through distillation attacks. The activity has been described as occurring a...

BUUCTF-Web-Writeups

BUUCTF-Web-Writeups A collection of CTF Web challenges writ...

⚡ Weekly Recap: Chinese Spy Proxy, AI Agents Go Off-Task, Router Backdoors and More

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional...

FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure

China’s hacking campaign targeted NASA, the Federal Reserve, the US Senate, the Justice Department, and more, according to the DOJ...

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more than 2 years. The...