🕴 Hot Ticket: 'Aurora' Go-Based InfoStealer Finds Favor Among Cyber-Threat Actors 🕴
📖 Read
via "Dark Reading".
The infostealer Aurora’s low detection rates and newcomer status are helping it fly under the radar, as more cybercriminal gangs target cryptocurrency wallets and communications apps.📖 Read
via "Dark Reading".
Dark Reading
Hot Ticket: 'Aurora' Go-Based InfoStealer Finds Favor Among Cyber-Threat Actors
The infostealer Aurora’s low detection rates and newcomer status are helping it fly under the radar, as more cybercriminal gangs target cryptocurrency wallets and communications apps.
🕴 'Patch Lag' Leaves Millions of Android Devices Vulnerable 🕴
📖 Read
via "Dark Reading".
Months after a fix was issued by a vendor, downstream Android device manufacturers still haven't patched, highlighting a troubling trend.📖 Read
via "Dark Reading".
Dark Reading
'Patch Lag' Leaves Millions of Android Devices Vulnerable
Months after a fix was issued by a vendor, downstream Android device manufacturers still haven't patched, highlighting a troubling trend.
⚠ CryptoRom “pig butchering” scam sites seized, suspects arrested in US ⚠
📖 Read
via "Naked Security".
Five tips to keep yourself, and your friends and family, out of the clutches of "chopping block" scammers...📖 Read
via "Naked Security".
Naked Security
Multimillion dollar CryptoRom scam sites seized, suspects arrested in US
Five tips to keep yourself, and your friends and family, out of the clutches of “chopping block” scammers…
‼ CVE-2021-35284 ‼
📖 Read
via "National Vulnerability Database".
SQL Injection vulnerability in function get_user in login_manager.php in rizalafani cms-php v1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41922 ‼
📖 Read
via "National Vulnerability Database".
`yiisoft/yii` before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. This has been patched in 1.1.27.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23740 ‼
📖 Read
via "National Vulnerability Database".
CRITICAL: An improper neutralization of argument delimiters in a command vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. To exploit this vulnerability, an attacker would need permission to create and build GitHub Pages using GitHub Actions. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40772 ‼
📖 Read
via "National Vulnerability Database".
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to a validation bypass that allows users to access sensitive data via the report module.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40304 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in libxml2 before 2.10.3. Certain invalid XML entity definitions can corrupt a hash table key, potentially leading to subsequent logic errors. In one case, a double-free can be provoked.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38113 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability discloses build and services versions in the server response header.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-35246 ‼
📖 Read
via "National Vulnerability Database".
The application fails to prevent users from connecting to it over unencrypted connections. An attacker able to modify a legitimate user's network traffic could bypass the application's use of SSL/TLS encryption and use the application as a platform for attacks against its users.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-39833 ‼
📖 Read
via "National Vulnerability Database".
FileCloud Versions 20.2 and later allows remote attackers to potentially cause unauthorized remote code execution and access to reported API endpoints via a crafted HTTP request.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35501 ‼
📖 Read
via "National Vulnerability Database".
Stored Cross-site Scripting in Amasty Blog Pro 2.10.4 and 2.10.4 creates post functionality and lower versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-36111 ‼
📖 Read
via "National Vulnerability Database".
immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that will be accepted by the client SDK signing a falsified transaction replacing the genuine one. This situation can not be triggered by a genuine immudb server and requires the client to perform a specific list of verified operations resulting in acceptance of an invalid state value. This vulnerability only affects immudb client SDKs, the immudb server itself is not affected by this vulnerability. This issue has been patched in version 1.4.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40771 ‼
📖 Read
via "National Vulnerability Database".
Zoho ManageEngine ServiceDesk Plus versions 13010 and prior are vulnerable to an XML External Entity attack that leads to Information Disclosure.📖 Read
via "National Vulnerability Database".
‼ CVE-2009-1142 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38115 ‼
📖 Read
via "National Vulnerability Database".
Insecure method vulnerability in which allowed HTTP methods are disclosed. E.g., OPTIONS, DELETE, TRACE, and PUT📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38114 ‼
📖 Read
via "National Vulnerability Database".
This vulnerability occurs when a web server fails to correctly process the Content-Length of POST requests. This can lead to HTTP request smuggling or XSS.📖 Read
via "National Vulnerability Database".
‼ CVE-2009-1143 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attack that leverages a realpath race condition in mount.vmhgfs (aka hgfsmounter).📖 Read
via "National Vulnerability Database".
🕴 Why Africa's Telecoms Must Actively Collaborate to Combat Fraud 🕴
📖 Read
via "Dark Reading".
Unique conditions contribute to outsized telecom fraud across the continent, but working together can bring solutions.📖 Read
via "Dark Reading".
Dark Reading
Why Africa's Telecoms Must Actively Collaborate to Combat Fraud
Unique conditions contribute to outsized telecom fraud across the continent, but working together can bring solutions.
🕴 How Development Teams Should Respond to Text4Shell 🕴
📖 Read
via "Dark Reading".
Yet another *4Shell exploit highlights the horror of strange visitors into enterprise environments. This Tech Tip focuses on what to do next.📖 Read
via "Dark Reading".
Dark Reading
How Development Teams Should Respond to Text4Shell
Yet another *4Shell exploit highlights the horror of strange visitors into enterprise environments. This Tech Tip focuses on what to do next.
‼ CVE-2022-44117 ‼
📖 Read
via "National Vulnerability Database".
Boa 0.94.14rc21 is vulnerable to SQL Injection via username.📖 Read
via "National Vulnerability Database".