Tenda FH451 formSafeClientFilter Function Buffer Overflow Vulnerability

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from the parameter Go/page in file /goform/SafeClientFilter that fails to properly validate the length of the input data, which can be exploited...

Disrupting active exploitation of on-premises SharePoint vulnerabilities

July 23, 2025 update – Expanded analysis and threat intelligence from our continued monitoring of exploitation activity by Storm-2603 leading to the deployment of Warlock ransomware. Based on new information, we have updated the Attribution, Indicators of compromise, extended and clarified...

China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure

The China-linked cyber espionage group tracked as APT41 has been attributed to a new campaign targeting government IT services in the African region. "The attackers used hardcoded names of internal services, IP addresses, and proxy servers embedded within their malware," Kaspersky researchers Den...

ASUS MyASUS 安全漏洞

ASUS MyASUS is an official ASUS PC application from Asus China Inc. A security vulnerability exists in ASUS MyASUS that stems from insecure storage of sensitive keys, which could lead to unauthorized participants obtaining a token...

jshERP 安全漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Shenghua in China. A security vulnerability exists in jshERP 3.5 and earlier versions, which stems from improper authorization due to incorrect manipulation of the parameter ID in the file /user/delete...

Siemens SICAM TOOLBOX II Trust Management Issue Vulnerability

Siemens SICAM TOOLBOX II is an engineering software from Siemens, Germany. A trust management issue vulnerability exists in Siemens SICAM TOOLBOX II that stems from a failure to check the extended key usage attribute of a device certificate, which could be exploited by an attacker to cause a...

Microsoft Windows Input Validation Error Vulnerability (CNVD-2025-16780)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. An attacker can exploit the vulnerability to elevate privileges...

RuoYi 安全漏洞

RuoYi is a backend management system by the individual developer of RuoYi in China. A security vulnerability exists in RuoYi 4.8.1 and earlier versions, which stems from an improper restriction of the rendering UI layer of the Image Source Handler component...

China’s Salt Typhoon Hackers Breached the US National Guard for Nearly a Year

Plus: Secret IRS data-sharing with ICE, a 20-year-old hackable vulnerability in train brakes, and more...

China's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones

Cybersecurity researchers have shed light on a mobile forensics tool called Massistant that's used by law enforcement authorities in China to gather information from seized mobile devices. The hacking tool, believed to be a successor of MFSocket, is developed by a Chinese company named SDIC...

StudentManage 安全漏洞

StudentManage is a student management system by DayCloud Individual Developer in China. A security vulnerability exists in StudentManage version 1.0, which stems from the mishandling of the Add A New Course module and may lead to cross-site scripting attacks...

TECNO tech.palm.id 安全漏洞

TECNO tech.palm.id is a mobile application from TECNO Corporation in China. A security vulnerability exists in TECNO tech.palm.id, which stems from an authentication flaw that could lead to information disclosure...

China-Built SafeLine WAF Gains Global Popularity Among Startups & Homelabs

Beijing, China, 14th July 2025, CyberNewsWire...

jshERP 路径遍历漏洞

jshERP Huaxia ERP is a homegrown ERP system by the individual developer of Ji Sheng Hua in China. jshERP 3.5 and previous versions of path traversal vulnerability, the vulnerability stems from improper operation of the parameter Title in the file SystemConfigController.java, which may lead to pat...

HGiga iSherlock 安全漏洞

HGiga iSherlock is a series of software products from China Henderson HGiga. A security vulnerability exists in HGiga iSherlock that originates from OS command injection and could lead to remote code execution...

WellChoose BatchSignCS 安全漏洞

WellChoose BatchSignCS is a signing service system from WellChoose, Inc. of Taiwan, China. A security vulnerability exists in WellChoose BatchSignCS that originates from an arbitrary file write and could lead to the execution of arbitrary code...

UTT HiPER 840G 安全漏洞

The UTT HiPER 840G is a full Gigabit Internet behavior management router from Atech UTT, which is aimed at small businesses, community networks, hotels, and other scenarios, providing high-speed network access and intelligent management features. The UTT HiPER 840G suffers from a buffer overflow...

FoxCMS 安全漏洞

FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS v1.2.6, which originates from the presence of arbitrary file uploads in the component /controller/PicManager.php, which may result in the execution of...

Jhenggao iPublish System 安全漏洞

Jhenggao iPublish System is a presentation platform from Jhenggao Corporation, Taiwan, China. A security vulnerability exists in the Jhenggao iPublish System that originates from vulnerability to arbitrary file read attacks...

07FLY多款产品 安全漏洞

07FLY-CMS and so on are products of China Zero Takeoff 07FLY company.07FLY-CMS is a free and open source content management system.07FLYCMS is a free and open source content management system.07Fly 07FLYCRM and so on are products of China Zero Takeoff 07Fly company.07FLYCRM is a customer...