Qibosoft Cross-Site Request Forgery Vulnerability (CNVD-2022-02758)

Qibosoft qibosoft is a content management system CMS from Qibosoft, a Chinese company. qibosoft is vulnerable to cross-site request forgery, which can be exploited by attackers to arbitrarily add administrator accounts...

Huawei HarmonyOS Coding Timing Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to cause a denial of service...

Huawei HarmonyOS Path Traversal Vulnerability (CNVD-2021-103541)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS has a security vulnerability. An attacker could exploit the vulnerability to write any content to any file...

Huawei HarmonyOS null pointer dereference vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to cause a denial of service attack...

Delta Electronics CNCSoft Out-of-Bounds Reading Vulnerability

Delta Electronics CNCSoft is a CNC machine tool simulation system software from Delta Electronics, a Chinese company. Delta Electronics CNCSoft suffers from an out-of-bounds read vulnerability, which can be exploited by attackers to compromise information...

Irani and Chinese State Hackers Exploiting Log4j Vulnerability

By Waqas According to Mandiant's John Hultquist, Iranian state hackers are specifically aggressive with this Log4j vulnerability. This is a post from HackRead.com Read the original post: Irani and Chinese State Hackers Exploiting Log4j Vulnerability...

Log4Shell Makes Its Appearance in Hacker Chatter: 4 Observations

It's been a long few days as organizations' security teams have worked to map, quantify, and mitigate the immense risk presented by the Log4Shell vulnerability within Log4j. As can be imagined, cybercriminals are working overtime as well, as they seek out ways to exploit this vulnerability. Need...

Huawei product memory leak vulnerability

Huawei CloudEngine is a data center switch from Huawei, a Chinese company. Huawei products are vulnerable to a memory leak that could be exploited by an attacker to cause a memory exhaustion...

Microsoft Seizes Domains Used by a Chinese Hacking Group

The move delivers a blow to the hackers behind sophisticated attacks on government agencies, think tanks, and other organizations...

Microsoft Seizes 42 Malicious Web Domains Used By Chinese Hackers

Microsoft on Monday announced the seizure of 42 domains used by a China-based cyber espionage group that set its sights on organizations in the U.S. and 28 other countries pursuant to a legal warrant issued by a federal court in the U.S. state of Virginia. The Redmond company attributed the...

Youtube - Php-Mirroring Cross-Site Scripting Vulnerability

Youtube-Php-Mirroring is a Chinese Php development based on Youtube video proxy scripts. ytube-php-mirroring is vulnerable to a cross-site scripting vulnerability that originates in the file ytproxy/index.php. site scripting XSS vulnerability in the file ytproxy/index.php. No detailed vulnerabili...

About 10 million Android devices found infected with Cynos malware

By Waqas In total, researchers have identified around 190 malware-infected games, some of which were designed to target Russian and Chinese users. This is a post from HackRead.com Read the original post: About 10 million Android devices found infected with Cynos malware...

Huawei HarmonyOS Input Validation Error Vulnerability (CNVD-2021-99976)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. A security vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, fully-scoped distributed operating system. An attacker could exploit this vulnerability to crash the kernel...

Huawei HarmonyOS privilege configuration vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. Huawei HarmonyOS is vulnerable to a privilege configuration vulnerability. An attacker could exploit this vulnerability to compromise user privacy...

Huawei HarmonyOS Input Validation Error Vulnerability (CNVD-2021-99972)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS contains a security vulnerability that could be exploited by attackers to compromise user availability...

Huawei HarmonyOS out-of-bounds read vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. An out-of-bounds read vulnerability exists in Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from the program not performing checksumming of messages...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd.

SCT is an information service provider in China, dedicated to the cause of disaster mitigation and benefit reduction, and provides the government with comprehensive solutions for disaster mitigation and benefit reduction informatization. A SQL injection vulnerability exists in the Flash Flood...

Open Redirect in star7th/showdoc

Description I found a new way to exploit Open Redirect at the "redirect" parameter on the login page by using the Chinese dot %E3%80%82 to bypass the dot . filter. Vulnerable parameter redirect Payload /%09/google%E3%80%82com Proof of Concept Send users the following login link...

Russian language hacking forums warming up to Chinese hackers

By Waqas Russian cybercrime and hacking forums are opening doors to Chinese and English-speaking threat actors, which so far had been a relatively restricted domain for them. This is a post from HackRead.com Read the original post: Russian language hacking forums warming up to Chinese hackers...

Huawei HarmonyOS infinite self-recursive vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable to an infinite self-recursive vulnerability, which could be exploited by local attackers to cause a kernel dump...