Actors, Threats and Vulnerabilities 10 April to 16 April 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of nine attacks that were executed...

Iran-Based Hackers Caught Carrying Out Destructive Attacks Under Ransomware Guise

The Iranian nation-state group known as MuddyWater has been observed carrying out destructive attacks on hybrid environments under the guise of a ransomware operation. That's according to new findings from the Microsoft Threat Intelligence team, which discovered the threat actor targeting both...

Iran-Based Hackers Caught Carrying Out Destructive Attacks Under Ransomware Guise

The Iranian nation-state group known as MuddyWater has been observed carrying out destructive attacks on hybrid environments under the guise of a ransomware operation. That's according to new findings from the Microsoft Threat Intelligence team, which discovered the threat actor targeting both...

MERCURY and DEV-1084: Destructive attack on hybrid environment

April 2023 update – Microsoft Threat Intelligence has shifted to a new threat actor naming taxonomy aligned around the theme of weather. MERCURY is now tracked as Mango Sandstorm and DEV-1084 is now tracked as Storm-1084. To learn more about the new taxonomy represents the origin, unique traits,...

MERCURY and DEV-1084: Destructive attack on hybrid environment

April 2023 update – Microsoft Threat Intelligence has shifted to a new threat actor naming taxonomy aligned around the theme of weather. MERCURY is now tracked as Mango Sandstorm and DEV-1084 is now tracked as Storm-1084. To learn more about the new taxonomy represents the origin, unique traits,...

CVE-2023-1084

creationtimestamp| type| source ---|---|--- 2023-03-09 22:22:17+00:00| seen| https://t.me/cibsecurity/59746...

CVE-2023-1084

Removed by vendor...

CVE-2023-1084

CVE-2023-1084 affects GitLab CE/EE. Affected versions include all before 15.7.8, 15.8 before 15.8.4, and 15.9 before 15.9.2. The issue allows a malicious project Maintainer to create a Project Access Token with Owner level privileges via a crafted request. Primary sources (NVD, OSV, and vendor di...

GitLab 0.0 < 15.7.8 / 15.8 < 15.8.4 / 15.9 < 15.9.2 (CVE-2023-1084)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A malicious project...

CVE-2022-1084 SourceCodester One Church Management System Session userregister.php improper authentication

A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /onechurch/userregister.php. The manipulation leads to authentication bypass. The attack can be launched remotely...

CVE-2022-1084

CVE-2022-1084 affects SourceCodester One Church Management System 1.0. An authentication bypass is caused by improper access control in /one_church/userregister.php, enabling remote exploitation. Documented as critical (CVSSv3.1 base score 9.8; CVSSv2 7.5). No remediation or exploit details are p...

EulerOS Virtualization 3.0.6.0 : nettle (EulerOS-SA-2022-1084)

According to the versions of the nettle packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions GOST DSA, EDDSA & ECDS...

CVE-2021-1084

CVE-2021-1084 affects NVIDIA vGPU software (guest driver and vGPU plugin) where an input length is not validated, enabling information disclosure, data tampering, or denial of service. The CVE is associated with vGPU branches 11.x (prior to 11.4) and 12.x (prior to 12.2). Public documents from NV...

Denial of service

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Denial of Service Vulnerability'. This CVE ID is unique from CVE-2020-1084...

CVE-2020-1123 Connected User Experiences and Telemetry Service Denial of Service Vulnerability

...

CVE-2020-1084

CVE-2020-1084 is a Denial of Service vulnerability in the Windows Connected User Experiences and Telemetry Service. The issue arises when the service fails to validate certain function values, which could allow an attacker who can log on and run a specially crafted application to cause a DoS that...

RHEL 7 : samba (RHSA-2020:1084)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1084 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol,...

CVE-2011-1084

creationtimestamp| type| source ---|---|--- 2020-02-08 00:33:09+00:00| seen| https://t.me/cibsecurity/9711...

CVE-2011-1084

CVE-2011-1084 is a cross-site scripting (XSS) vulnerability in Smoothwall Express 3. The CVSS v3.1 base metrics indicate a Network attack vector, Low attack complexity, No privileges required, but User interaction is Required and the scope is Changed, with Low impact on confidentiality and integr...

Huawei EulerOS: Security Advisory for sox (EulerOS-SA-2018-1084)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...