Hackers Using New Version of FurBall Android Malware to Spy on Iranian Citizens

The Iranian threat actor known as Domestic Kitten has been attributed to a new mobile campaign that masquerades as a translation app to distribute an updated variant of an Android malware known as FurBall. "Since June 2021, it has been distributed as a translation app via a copycat of an Iranian...

procps-ng bug fix and enhancement update

An update is available for procps-ng. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The procps-ng packages contain a set of system utilities that provide syste...

Adobe InDesign < 17.4 Arbitrary File Read Vulnerability (APSB22-50)

The version of Adobe InDesign installed on the remote host is prior to 17.4. It is, therefore, affected by an arbitrary file read vulnerability. A remote, unauthenticated attacker can exploit this to read arbitrary files. Note that Nessus has not attempted to exploit these issues but has instead...

Adobe InDesign Multiple Vulnerabilities (APSB22-50) - Windows

Adobe Indesign is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:indesignserver";...

CVE-2022-39176

creationtimestamp| type| source ---|---|--- 2022-09-02 07:38:50+00:00| seen| https://t.me/cibsecurity/49224...

CVE-2022-36285

creationtimestamp| type| source ---|---|--- 2022-08-23 20:21:50+00:00| seen| https://t.me/cibsecurity/48600...

casaruralmanchega.50.ylos.com Cross Site Scripting vulnerability OBB-2856302

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

50-hertz.com Cross Site Scripting vulnerability OBB-2842591

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-20286

creationtimestamp| type| source ---|---|--- 2022-08-12 18:39:50+00:00| seen| https://t.me/cibsecurity/48060...

CVE-2022-23003

creationtimestamp| type| source ---|---|--- 2022-07-29 22:13:50+00:00| seen| https://t.me/cibsecurity/47284...

CVE-2021-22131

creationtimestamp| type| source ---|---|--- 2022-07-18 22:39:50+00:00| seen| https://t.me/cibsecurity/46490...

bpo.gr.jp Cross Site Scripting vulnerability OBB-2790223

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

50+ firms attacked by Black Basta ransomware group

Threat Level Actor Report For a detailed advisory, download the pdf file here Summary Black Basta ransomware is a new ransomware family that has been discovered in April 2022. The group targets English-speaking countries, specifically, and has targeted approximately 50 victims in Australia, Canad...

CVE-2022-34206

creationtimestamp| type| source ---|---|--- 2022-06-23 20:39:50+00:00| seen| https://t.me/cibsecurity/45027...

CVE-2022-31734

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.250SY...

Cross site scripting

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.250SY...

CVE-2022-31734

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.250SY...

PT-2022-3792 · Cisco · Cisco Catalyst 2940 Series Switches

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst 2940 Series Switches versions prior to 12.250SY Description: The issue exists due to inadequate protection of the web page structure, allowing for a reflected cross-site scripting attack. This can enable a remote attacker to...

Zyxel Firewall ZTP Unauthenticated Command Injection Exploit

This Metasploit module exploits CVE-2022-30525, an unauthenticated remote command injection vulnerability affecting Zyxel firewalls with zero touch provisioning ZTP support. By sending a malicious setWanPortSt command containing an mtu field with a crafted OS command to the /ztp/cgi-bin/handler...

QNAP QTS / QuTS hero Buffer Overflow (QSA-21-50)

The version of QNAP QTS or QuTS hero on the remote host is affected by a heap-based buffer overflow vulnerability in devices that have Apple File Protocol AFP enabled. This allows attackers to execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied only on th...