JeecgBoot SQL Injection Vulnerability

JeecgBoot is a Java low-code platform for enterprise Web applications in China. A SQL injection vulnerability exists in JeecgBoot version 3.0, which stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to...

New DazzleSpy malware attacks macOS

DazzleSpy, a piece of malware that attacks macOS, was discovered last fall by researchers at ESET, and now those researchers have released more detailed findings. DazzleSpy, according to the researchers at ESET, was being spread via watering hole attacks via pro-democracy websites in China. It...

Elfspirit 缓冲区错误漏洞

Elfspirit is a Chinese Elf static analysis and injection framework . It is used to parse, manipulate and disguise Elf files. A security vulnerability exists in elfspirit, which stems from a read out-of-bounds error that could cause an attacker to crash the application or disclose information...

Chinese Hackers Spotted Using New UEFI Firmware Implant in Targeted Attacks

A previously undocumented firmware implant deployed to maintain stealthy persistence as part of a targeted espionage campaign has been linked to the Chinese-speaking Winnti advanced persistent threat group APT41. Kaspersky, which codenamed the rootkit MoonBounce, characterized the malware as the...

Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2022-08456)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS has a security vulnerability. An attacker can exploit the vulnerability to make anonymous calls to Unicom...

Huawei HarmonyOS AOD module heap buffer overflow vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. The Huawei HarmonyOS AOD module is vulnerable to a heap buffer overflow vulnerability that could be exploited by an attacker to compromise service integrity...

Huawei HarmonyOS Business Logic Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. Huawei HarmonyOS is vulnerable to a business logic error that could be exploited by an attacker to compromise availability...

Huawei HarmonyOS has an unspecified vulnerability (CNVD-2022-08312)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit the vulnerability to potentially cause a process to reboot...

Huawei HarmonyOS Out-of-Bounds Read Vulnerability (CNVD-2022-17715)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to compromise confidentiality...

Huawei HarmonyOS has an unspecified vulnerability (CNVD-2022-08318)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security vulnerability exists in Huawei HarmonyOS Vision HwNearbyMain, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Huawei HarmonyOS Wearables Out-of-Bounds Write Vulnerability

HarmonyOS Wearables is an electronic watch operating system from Huawei, a Chinese company. HarmonyOS Wearables suffers from an out-of-bounds write vulnerability that originates from an out-of-bounds write in the aod module of HarmonyOS, which can be exploited by an attacker to cause a system...

GO-2021-0160 Incorrect calculation affecting RSA computations in math/big

Int.Exp Montgomery mishandled carry propagation and produced an incorrect output, which makes it easier for attackers to obtain private RSA keys via unspecified vectors. This issue can affect RSA computations in crypto/rsa, which is used by crypto/tls. TLS servers on 32-bit systems could plausibl...

Sun & Moon Rise Shockwall system input validation error vulnerability

The Sun & Moon Rise Shockwall System is a computer endpoint protection system from Sun & Moon Rise, a Chinese company, that suffers from a security vulnerability that could be exploited to send malicious responses to servers to partially disrupt service...

Shockwall system authorization issue vulnerability

Sun & Moon Rise Shockwall System is a computer endpoint protection system from Sun & Moon Rise, a Chinese company. A server-side request forgery SSRF attack can be launched against another proxy computer using local registry information, resulting in the execution of arbitrary code to control the...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called Mediatek. A security vulnerability exists in the MediaTek chips that allows exposure of sensitive information to unauthorized participants in the seninf driver...

Huawei HarmonyOS Injection Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. A security vulnerability exists in Huawei HarmonyOS, which stems from a parameter injection type of vulnerability in a component of Huawei HarmonyOS. No details o...

Huawei HarmonyOS Licensing Issue Vulnerability (CNVD-2022-20310)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. Huawei HarmonyOS has a security vulnerability that originates from improper design or implementation during code development of a network system or product. An...

Huawei HarmonyOS Competition Condition Vulnerability (CNVD-2022-20309)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS is vulnerable to a competitive condition that could be exploited by an attacker to compromise confidentiality and availability...

Huawei HarmonyOS encryption issue vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an encryption issue, which stems from a component of the product that does not effectively encrypt encrypt encrypted data. An...

Qibosoft licensing issue vulnerability

Qibosoft qibosoft is a content management system CMS from Qibosoft, a Chinese company. qibosoft is vulnerable to licensing issues, which can be exploited by attackers to arbitrarily delete files...