nuclei

अंग्रेज़ी • 中文 • कोरियाई • इंडोनेशियाई • स्पेनिश • 日本語 • पुर्तगाली • तुर्की...

Flash-player

Fake-flash.cn www.flash.cn का फ़िशिंग पृष्ठ, चीनी + अंग्रेज़ी ऑनलाइन पूर्वावलोकन: http://fake-flash.se7ensec.cn/...

C2-detection-manjusaka

Détection du framework C2 « Manjusaka » Détection du framework C2 Manjusaka : « un cousin chinois de Sliver et Cobalt Strike » Références : Détails de la logique de détection : https://corelight.com/blog/detecting-manjusaka-c2-framework Analyse par Talos :...

CVE-2021-26856

J'ai traduit l'exploit chinois disponible sur https://github.com/jsdryan/CVE-2021-26855 pour les lecteurs anglophones, et les personnes peu familières avec golang n'ont qu'à regarder les images png...

Chinese-Cybercrime-Research

أبحاث الجرائم الإلكترونية الصينية موارد لتعرف المزيد عن جهات التهديد الإلكتروني الناطقة بالصينية. التصيد مجموعات التصيد YYlaiyu https://cloud.google.com/blog/topics/threat-intelligence/chinese-language-phishing-services https://spycloud.com/blog/yylaiyu-chinese-phishing-as-a-service-panel/...

CVE-2024-37051-EXP

CVE-2024-37051-EXP CVE-2024-37051 PoC ed exploit Vedi PR 1: https://github.com/LeadroyaL/CVE-2024-37051-EXP/pull/1 Analisi della vulnerabilità in cinese: https://leadroyal.cn/p/2403/...

Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells

Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least 20 Chinese router models from Zbtlink. According to a new report from VulnCheck, the implant appears in all 21 firmware images currently available from Zbtlink that span more than 2 years. The...

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS

An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most ...

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted...

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks

Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no...

CVE-2026-64304

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate RSA CRT component lengths The generic RSA key parser rsahelper.c bounds each CRT component p, q, dp, dq, qinv by the modulus size nsz, but qatrsasetkeycrt allocates half-size DMA buffers keysz / 2 and...

CVE-2026-13104

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

EUVD-2026-44977

A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...

CVE-2026-13103

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...

EUVD-2026-44976

A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code...

CVE-2026-9046

A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the Chinese market, that when installed on a non‑system partition, could allow a local user to execute arbitrary code...

CNVD-2023-27598

creationtimestamp| type| source ---|---|--- 2026-06-30 09:23:11+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d00febbd-741a-4af5-a5f6-82b4ca156c88...

Security Bulletin: XcodeGhost iOS malware

Question Security Bulletin: XcodeGhost iOS malware "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All Versions","Edition":"","Line of...

China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance

Cybersecurity researchers have warned of a "resurgence and expansion" of JDY , a covert network associated with China-nexus state-sponsored threat actors. "The JDY botnet comprises over 1,500 SOHO small office and home office and IoT devices and operates as a centrally controlled, high-performanc...

CVE-2026-7516

A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite system clipboard contents...