China's Baidu Android Apps Caught Collecting Sensitive User Data

Two popular Android apps from Chinese tech giant Baidu were temporarily unavailable on the Google Play Store in October after they were caught collecting sensitive user details. The two apps in question—Baidu Maps and Baidu Search Box—were found to collect device identifiers, such as the...

Baidu Mobile Apps in Google Play Leak Sensitive Data

Multiple Android mobile apps found in Google Play, including Baidu Search Box and Baidu Maps, were found by researchers to be leaking data that could be used to track users – even if they switch devices. The apps have each been downloaded millions of times, according to Palo Alto Unit 42...

File Upload Vulnerability in Baidu Deep Blue Alliance Personnel Management System

Baidu Deep Blue Alliance personnel management system is an OA system project. A file upload vulnerability exists in the Baidu Deep Blue Alliance Personnel Management System, which can be exploited by an attacker to gain control of the server...

DoubleGun Group Builds Massive Botnet Using Cloud Services

An operation from the China-based cybercrime gang known as DoubleGun Group has been disrupted, which had amassed hundreds of thousands of bots that were controlled via public cloud services, including Alibaba and Baidu Tieba. NetLab 360 researchers, in a recent posting, said that it noticed DNS...

Chinese Researchers Disrupt Malware Attack That Infected Thousands of PCs

Chinese security firm Qihoo 360 Netlab said it partnered with tech giant Baidu to disrupt a malware botnet infecting over hundreds of thousands of systems. The botnet was traced back to a group it calls ShuangQiang also called Double Gun, which has been behind several attacks since 2017 aimed at...

Chinese Researchers Disrupt Malware Attack That Infected Thousands of PCs

Chinese security firm Qihoo 360 Netlab said it partnered with tech giant Baidu to disrupt a malware botnet infecting over hundreds of thousands of systems. The botnet was traced back to a group it calls ShuangQiang also called Double Gun, which has been behind several attacks since 2017 aimed at...

Baidu.com PC client suffers from Dll hijacking vulnerability

Baidu.com formerly Baidu Cloud is a cloud storage service launched by Baidu, which has covered the mainstream PC and cell phone operating systems, including Web version, Windows version, Mac version, Android version, iPhone version and Windows Phone version. Users will be able to easily upload...

Baidu Five Strokes Input Method Exploits Dll Hijacking Vulnerability

Baidu 5-stroke Input Method is a Chinese 5-stroke input method software under Baidu. Baidu Five Strokes Input Method suffers from a Dll hijacking vulnerability, which can be exploited by attackers to load a malicious dll and execute arbitrary code...

Baidu Pinyin Input Method Exploits Dll Hijacking Vulnerability

Baidu Pinyin Input Method is a Chinese pinyin input method software under Baidu. Baidu Pinyin Input Method suffers from a Dll hijacking vulnerability, which can be exploited by an attacker to load a malicious dll and execute arbitrary code...

Baidu Input Method of Beijing Baidu Netcom Technology Co. Ltd. suffers from dll hijacking vulnerability

Baidu Input Method is an input method that integrates handwriting, voice, win10, strokes, mouse handwriting and mobile input method. Ltd. Baidu Input Method has a dll hijacking vulnerability, which can be exploited by attackers to cause a user's computer to be remote controlled or implanted with ...

Netdata - Real-time Performance Monitoring

Netdata is distributed, real-time, performance and health monitoring for systems and applications. It is a highly-optimized monitoring agent you install on all your systems and containers. Netdata provides unparalleled insights , in real-time , of everything happening on the systems it runs...

Unspecified Vulnerability in Baidu Rust SGX SDK

Baidu Rust SGX SDK is a Rust language development kit for Intel SGX Trusted Computing Platform from Baidu, China. A security vulnerability exists in Baidu Rust SGX SDK 1.0.8 and earlier versions. No detailed vulnerability details are available at this time...

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

Sql injection

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

CVE-2020-5499

Summary: CVE-2020-5499 affects Baidu Rust SGX SDK up to version 1.0.8, where an enclave ID race can yield non‑deterministic results in which two global IDs are the same. The linked records consistently describe this as the enclave ID race issue and reference Baidu Rust SGX SDK 1.0.8 and earlier. ...

SQL Injection Vulnerability in Website Building System of Jinhua Jishi Information Technology Co.

Ltd. was founded in 2012, is the only designated service operator of Baidu in Jinhua area. We are committed to providing localized and convenient services for Baidu customers, helping enterprises to get more orders and enhance brand awareness through Baidu promotion. A SQL injection vulnerability...

Baidu HI pc client software suffers from DLL hijacking vulnerability

Baidu Hi is an instant messaging software that combines text messaging, audio and video calling, file transfer and more. The Baidu HI pc client software suffers from a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to...

Stored xss vulnerability in Seven Bears repository system

Seven bears library system is a similar to Baidu library online document preview, selling system. A stored xss vulnerability exists in the Seven Bears library system, which can be exploited by an attacker to inject arbitrary Web script or HTML...