Chinese Hacker Xu Zewei Arrested for Ties to Silk Typhoon Group and U.S. Cyber Attacks

A Chinese national has been arrested in Milan, Italy, for his alleged links to a state-sponsored hacking group known as Silk Typhoon and for carrying out cyber attacks against American organizations and government agencies. The 33-year-old, Xu Zewei , has been charged with nine counts of wire fra...

Logic Flaw Vulnerability in Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co.

Founded in December 2010, Shanghai SinoCom-ArtM Information Technology Co., Ltd hereinafter referred to as "SinoCom-ArtM" is one of the leading providers of IT intelligent security operation and maintenance, data governance, security services and other fields in China. A logic flaw exists in the...

Unauthorized Access Vulnerability in ioLogik E1210-T of Mosaic Technology (Shanghai) Co.

The ioLogik E1210-T is an industrial Ethernet module. Mosaic Technology Shanghai Co. ioLogik E1210-T suffers from an unauthorized access vulnerability that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in ioLogik E1210 of Mosaic Technology (Shanghai) Co.

The ioLogik E1210 is an Ethernet I/O module that supports daisy-chain topology and is mainly used in industrial automation and device monitoring scenarios. Mosa Technologies Shanghai Co. ioLogik E1210 suffers from an unauthorized access vulnerability, which can be exploited by attackers to obtain...

CVE-2024-4511

A vulnerability classified as critical has been found in Shanghai Sunfull Automation BACnet Server HMI1002-ARM 2.0.4. This affects an unknown part of the component Message Handler. The manipulation leads to buffer overflow. The exploit has been disclosed to the public and may be used. The...

CVE-2023-5827

A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown part of the file /Web/SysManage/UserEdit.aspx. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed t...

CVE-2022-27373

Shanghai Feixun Data Communication Technology Co., Ltd router fir302b A2 was discovered to contain a remote command execution RCE vulnerability via the Ping function...

CVE-2018-10739

An issue was discovered in Shanghai 2345 Security Guard 3.7.0. 2345MPCSafe.exe allows local users to bypass intended process protections, and consequently terminate process, because WMSYSCOMMAND is not properly considered...

SQL Injection Vulnerability in the ERP System of Shanghai Qiwang Information Technology Co.

Ltd. is a company that specializes in providing high-end intelligent manufacturing management solutions for the packaging and printing industry. Ltd. ERP system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2025-4532 Shanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path

A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunloginguard.exe. The manipulation leads to uncontrolled search path. Local access is required to...

Data Leak Exposes TopSec's Role in China's Censorship-as-a-Service Operations

An analysis of a data leak from a Chinese cybersecurity company TopSec has revealed that it likely offers censorship-as-a-service solutions to prospective customers, including a state-owned enterprise in the country. Founded in 1995, TopSec ostensibly offers services such as Endpoint Detection an...

File Upload Vulnerability in Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co.

Shanghai Shangxun Information Technology Co., Ltd. is a leading provider specializing in information security technology. A file upload vulnerability exists in the Operations and Maintenance Management and Audit System of Shanghai Shangxun Information Technology Company Limited, which can be...

CVE-2024-56965

An issue in Shanghai Shizhi Information Technology Co., Ltd Shihuo iOS 8.16.0 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2024-56966

An issue in Shanghai Xuan Ting Entertainment Information & Technology Co., Ltd Qidian Reader iOS 5.9.384 allows attackers to access sensitive user information via supplying a crafted link...

CVE-2025-0463

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&miniproconsttype=1&relatedmodule=Singin. The...

Directory Traversal Vulnerability in Email Security Defense System of Shanghai Shangxun Information Technology Co.

Shanghai Shangxun Information Technology Co., Ltd. is an enterprise mainly engaged in software and information technology service industry. A directory traversal vulnerability exists in the email security defense system of Shanghai Shangxun Information Technology Co. Ltd. that can be exploited by...

Command Execution Vulnerability in the Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co. Ltd (CNVD-C-2024-941497)

Founded in December 2010, Shanghai SinoCom-ArtM Information Technology Co., Ltd. is one of the leading domestic suppliers in the fields of data, intelligent security operation and maintenance, mobile security and security services. A command execution vulnerability exists in the Operations and...

Command Execution Vulnerability in Operation and Maintenance Management Audit System of Shanghai Shangxun Information Technology Co.

Founded in December 2010, Shanghai SinoCom-ArtM Information Technology Co., Ltd. is one of the leading domestic suppliers in the fields of data, intelligent security operation and maintenance, mobile security and security services. A command execution vulnerability exists in the Operations and...

SQL Injection Vulnerability in the Integrated Management Information System of Shanghai Jinhui Software Co.

Shanghai Jinhui Software Co., Ltd. is a professional service provider focusing on digital intelligence in the engineering and construction industry design enterprises, engineering enterprises, owner units, government agencies. Shanghai Jinhui Software Co., Ltd. comprehensive management informatio...

Weak Password Vulnerability in the ERP System of Shanghai Qiwang Information Technology Co.

Ltd. is a company that specializes in providing high-end intelligent manufacturing management solutions for the packaging and printing industry. Ltd. ERP system has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...