2000 matches found
Huawei HarmonyOS post-release usage vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. Huawei HarmonyOS 2.0 previously had a security vulnerability that could be exploited by a local attacker to cause a kernel information leak...
Huawei HarmonyOS null pointer dereference vulnerability
Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based, distributed operating system. Huawei HarmonyOS 2.0 was previously vulnerable due to a null pointer dereference vulnerability in a component of HarmonyOS, which could be exploited by a local...
Chinese VPN app Quickfox caught exposing 1 million users’ data
By Waqas The Quickfox VPN is mainly used by Chinese citizens living abroad who need to access Chinese websites as most of these sites are geo-restricted. This is a post from HackRead.com Read the original post: Chinese VPN app Quickfox caught exposing 1 million users data...
ShinHer StudyOnline System Cross-Site Scripting Vulnerability
ShinHer StudyOnline System is a school administration system from ShinHer, a Chinese company. special characters in the title parameter. An attacker could use this vulnerability to inject JavaScript and execute a stored XSS attack after logging in with user privileges...
Foxit PDF Editor Remote Code Execution Vulnerability
Foxit PDF Editor is a PDF editor from Foxit, a Chinese company. A security vulnerability exists in Foxit PDF Editor, which stems from the fact that the product does not verify the existence of an Annotation object before operating on it. The vulnerability can be exploited to cause malicious code...
iPhone 13 Pro, Windows, Chrome, Linux and others pwned at Tianfu Cup
By Waqas Tianfu Cup is the Chinese version of the Pwn2own in Kunlun Lab managed to secure first place by hacking iPhone 13. This is a post from HackRead.com Read the original post: iPhone 13 Pro, Windows, Chrome, Linux and others pwned at Tianfu Cup...
Dahua IPC Authentication Bypass Vulnerability
The Dahua IPC is a series of industrial controls from Dahua, a Chinese company. An authentication bypass vulnerability exists in the Dahua IPC, which can be exploited by an attacker to bypass device authentication by constructing malicious packets...
Dahua IPC Authentication Bypass Vulnerability (CNVD-2021-103420)
The Dahua IPC is a series of industrial controls from Dahua, a Chinese company. An authentication bypass vulnerability exists in the Dahua IPC, which can be exploited by an attacker to bypass device authentication by constructing malicious packets...
Windows Zero-Day Actively Exploited in Widespread Espionage Campaign
Researchers have discovered a zero-day exploit for Microsoft Windows that was being used to elevate privileges and take over Windows servers as part of a Chinese-speaking advanced persistent threat APT espionage campaign this summer. The exploit chain ended with a freshly discovered remote access...
New Study Links Seemingly Disparate Malware Attacks to Chinese Hackers
Chinese cyber espionage group APT41 has been linked to seemingly disparate malware campaigns, according to fresh research that has mapped together additional parts of the group's network infrastructure to hit upon a state-sponsored campaign that takes advantage of COVID-themed phishing lures to...
Chinese Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users
A formerly unknown Chinese-speaking threat actor has been linked to a long-standing evasive operation aimed at South East Asian targets as far back as July 2020 to deploy a kernel-mode rootkit on compromised Windows systems. Attacks mounted by the hacking group, dubbed GhostEmperor by Kaspersky,...
S-CMS Access Control Error Vulnerability
S-CMS is a PHP and MySQL-based content management system CMS from S-CMS, a Chinese company. S-CMS suffers from an access control error vulnerability, which originates from an unauthorized access vulnerability in CMS Enterprise Website Construction System 5.0. An attacker can use this vulnerabilit...
CVE-2021-30086
Cross Site Scripting XSS vulnerability exists in KindEditor Chinese versions 4.1.12, which can be exploited by an attacker to obtain user cookie information...
CVE-2021-30086
Cross Site Scripting XSS vulnerability exists in KindEditor Chinese versions 4.1.12, which can be exploited by an attacker to obtain user cookie information...
CVE-2021-30086
Cross Site Scripting XSS vulnerability exists in KindEditor Chinese versions 4.1.12, which can be exploited by an attacker to obtain user cookie information...
CVE-2021-30086
CVE-2021-30086 is a Cross Site Scripting (XSS) issue in KindEditor (Chinese versions) 4.1.12. The vulnerability could allow an attacker to obtain user cookie information. The provided documents confirm the affected product and version and the impact; however, no concrete exploit details, affected...
CVE-2021-30086
Cross Site Scripting XSS vulnerability exists in KindEditor Chinese versions 4.1.12, which can be exploited by an attacker to obtain user cookie information...
Kindeditor 跨站脚本漏洞
Kindeditor is a Web-based lightweight open source HTML rich text editor from the Kindeditor community. KindEditor Cross-site scripting vulnerability exists, the vulnerability stems from KindEditor Chinese version 4.1.12 cross-site scripting XSS vulnerability. An attacker can exploit this...
Lithuania wants users to dump Chinese phones citing data collection
By Deeba Ahmed Lithuania Defense Ministry has released a warning, urging consumers to get rid of their Chinese phones and not to buy new ones amid data security. This is a post from HackRead.com Read the original post: Lithuania wants users to dump Chinese phones citing data collection...
