State-sponsored Threat Groups Target Telcos, Steal 5G Secrets

Chinese-language APTs are targeting telecom companies in cyberespionage campaigns aimed at stealing sensitive data and trade secrets tied to 5G technology, according to researchers. The campaigns, dubbed “Operation Diànxùn”, target and lure victims working in the telecom industry. A typical ploy...

Researchers Unveil New Linux Malware Linked to Chinese Hackers

Cybersecurity researchers on Wednesday shed light on a new sophisticated backdoor targeting Linux endpoints and servers that's believed to be the work of Chinese nation-state actors. Dubbed "RedXOR" by Intezer, the backdoor masquerades as a polkit daemon, with similarities found between the malwa...

D-Link DAP-2020 <= 1.01 Multiple Vulnerabilities - Active Check

D-Link DAP-2020 devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX = "cpe:/o:dlink"; if...

Command Execution Vulnerability in Splashtop Streamer

Splashtop Streamer is a remote control system. Splashtop Streamer suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...

Helpcom Trust Management Issues Vulnerabilities

Helpcom is an application from the Korean company Helpcom. It provides remote control services. A security vulnerability exists in versions prior to Helpcom v10.0 that stems from storing hard-coded encryption keys. No detailed vulnerability details are provided at this time...

Weak Password Vulnerability in eVision Camera

Located in Shenzhen, Guangdong, China, E-Vision Technology is a company that mainly deals with digital cameras. A weak password vulnerability exists in EaseUS cameras, which can be exploited by an attacker to remotely connect to and control the camera...

Researchers Unmask Hackers Behind APOMacroSploit Malware Builder

Cybersecurity researchers have disclosed a new kind of Office malware distributed as part of a malicious email campaign that targeted more than 80 customers worldwide in an attempt to control victim machines and steal information remotely. The tool — dubbed "APOMacroSploit" — is a macro exploit...

Zhuhai Kingsoft Office Software Co., Ltd. Kingsoft PDF suffers from dll hijacking vulnerability

Kingsoft PDF is a powerful and easy-to-use PDF editor. Support one-click editing, quickly modify the content of PDF documents, and support PDF documents and docx/pptx/excel/txt/pictures and other document formats conversion. Ltd. Kingsoft PDF dll hijacking vulnerability, attackers can use the...

CVE-2020-28999

An issue was discovered in Apexis Streaming Video Web Application on Geeni GNC-CW013 doorbell 1.8.1 devices. A remote attacker can take full control of the camera with a high-privileged account. The vulnerability exists because a static username and password are compiled into a shared library...

CVE-2020-29000

CVE-2020-29000 affects Geeni GNC-CW013 doorbell (firmware 1.8.1). The RTSP service vulnerability allows a remote attacker with network access and high privileges to remotely gain full control, including delivering a Telnet session and accessing the camera system via DNS control. No concrete remed...

CVE-2020-28998

An issue was discovered on Geeni GNC-CW013 doorbell 1.8.1 devices. A vulnerability exists in the Telnet service that allows a remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password...

Penguin Aurora Box has an unauthorized access vulnerability

Penguin Aurora Box is a high-end network HD set-top box produced by Tencent Video in conjunction with Skyworth Digital. An unauthorized access vulnerability exists in Penguin Aurora Box. An attacker can exploit the vulnerability to gain unauthorized access to a specific link to remotely control a...

Ludmaster Classic suffers from a dll hijacking vulnerability (CNVD-2021-09954)

LU Master is a well-known free system tool software in China, providing free hardware authenticity identification, stability guarantee, system performance improvement, LU Master has hardware detection, hardware testing, system optimization, energy saving and cooling, driver installation, driver a...

Lumax Classic suffers from dll hijacking vulnerability (CNVD-2021-09953)

LU Master is a well-known free system tool software in China, providing free hardware authenticity identification, stability guarantee, system performance improvement, LU Master has hardware detection, hardware testing, system optimization, energy saving and cooling, driver installation, driver a...

Kingsoft PDF suffers from dll hijacking vulnerability (CNVD-2021-11814)

Kingsoft PDF is by Kingsoft Office Software Limited out of a PDF file format for reading and editing tools. Kingsoft PDF dll hijacking vulnerability, attackers can use the vulnerability led to the user's computer is remote control or implanted Trojan horse...

Kingsoft PDF suffers from dll hijacking vulnerability (CNVD-2021-11813)

Kingsoft PDF is by Kingsoft Office Software Limited out of a PDF file format for reading and editing tools. Kingsoft PDF dll hijacking vulnerability, attackers can use the vulnerability led to the user's computer is remote control or implanted Trojan horse...

Kingsoft PDF suffers from dll hijacking vulnerability (CNVD-2021-11812)

Kingsoft PDF is by Kingsoft Office Software Limited out of a PDF file format for reading and editing tools. Kingsoft PDF dll hijacking vulnerability, attackers can use the vulnerability led to the user's computer is remote control or implanted Trojan horse...

360 Secure Cloud Drive Windows interface version suffers from dll hijacking vulnerability (CNVD-2021-10428)

360 Secure Cloud Disk is a product that provides cloud storage and file sharing services for a wide range of real-name personal and business users. 360 Secure Cloud Disk Windows interface version of the dll hijacking vulnerability, attackers can use the vulnerability to cause the user's computer ...

360 Secure Cloud Drive Windows Interface Version Has a dll Hijacking Vulnerability

360 Secure Cloud Disk is a product that provides cloud storage and file sharing services for a wide range of real-name personal and business users. 360 Secure Cloud Disk Windows interface version of the dll hijacking vulnerability, attackers can use the vulnerability to cause the user's computer ...

Shenzhen Tencent Computer System Co., Ltd. government weibo has dll hijacking vulnerability (CNVD-2021-09532)

Government WeChat is a smart office solution for the government provided by Tencent's Enterprise WeChat team on the basis of the original Enterprise WeChat. Shenzhen Tencent Computer Systems Limited Government WeChat has a dll hijacking vulnerability, which can be exploited by attackers to cause...