55 matches found
Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction
= doi.org/10.5281/zenodo.18283540 = orcid.org/0009-0007-7728-256X README.md 🐆 JAGUARTOOTH 분석 및 연구 APT28/Fancy Bear -blue?style=for-the-badge 📑 개요 JAGUARTOOTH 악성코드에 대한 종합적인 분석과 기술적 재구성입니다. 이 악성코드는 위협 행위자 APT28GRU 부대 74455과 연계된 비영구적 사이버 스파이 도구입니다. 이 저장소는 사이버 보안 연구, 위협 헌팅, 그리고 중요 인프라 방어 개발을 위해...
MINI-VJQP-V49J-6742
Bulletin has no description...
CVE-2026-6742
creationtimestamp| type| source ---|---|--- 2026-07-08 10:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq4v7uy7qi2k...
MINI-PCX2-6QQH-6742
Bulletin has no description...
WordPress SureForms Plugin Multiple Vulnerabilities (Jul 2025)
The WordPress plugin SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:brainstormforce:sureforms"; if description...
CVE-2025-6742 SureForms – Drag and Drop Form Builder for WordPress <= 1.7.3 - Unauthenticated PHP Object Injection (PHAR) Triggered via Admin Submission Deletion
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.3 via the use of fileexists in the deleteentryfiles function without restriction on the path provided. This makes it possible for...
CVE-2007-6742
The getfilterlist function in IBM Tivoli Directory Server TDS 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service infinite loop via a malformed search filter...
CVE-2019-6742
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung Galaxy S9 prior to 1.4.20.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the GameServiceReceiver update mechanism. An...
CVE-2024-6742 AguardNet Space Management System - Reflected Cross-Site Scripting
AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks...
Ubuntu: Security Advisory (USN-6742-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 22.04 LTS : Linux kernel vulnerabilities (USN-6742-2)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6742-2 advisory. Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the Bluetooth protocol could allow an unauthenticated user ...
Ubuntu: Security Advisory (USN-6742-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-6742
creationtimestamp| type| source ---|---|--- 2024-01-25 14:11:23+00:00| seen| https://t.me/ctinow/173450...
CVE-2023-6742
The Gallery Plugin for WordPress – Envira Photo Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to an improper capability check on the 'enviragalleryinsertimages' function in all versions up to, and including, 1.8.7.1. This makes it possible for authenticated...
WordPress Envira Photo Gallery Plugin <= 1.8.7.2 is vulnerable to Broken Access Control
Software Envira Photo Gallery Type Plugin Vulnerable versions = 1.8.7.2 Fixed in 1.8.7.3 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-6742 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID c7d340beb959 Credits Nex Team Required...
CVE-2017-6742
creationtimestamp| type| source ---|---|--- 2023-04-23 07:46:30+00:00| exploited| https://t.me/SecLabNews/13650 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 02:55:04+00:00| seen| https://t.me/arpsyndicate/1097 2024-12-24 20:34:15+00:00| seen|...
U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage
U.K. and U.S. cybersecurity and intelligence agencies have warned of Russian nation-state actors exploiting now-patched flaws in networking equipment from Cisco to conduct reconnaissance and deploy malware against select targets. The intrusions, per the authorities, took place in 2021 and targete...
APT28 Exploits Known Vulnerability To Carry Out Reconnaissance and Deploy Malware on Cisco Routers
NCSClink is external, NSA, CISA, and FBI have released a joint advisory to provide details of tactics, techniques, and procedures TTPs associated with APT28's exploitation of Cisco routers in 2021. By exploiting the vulnerability CVE-2017-6742link is external, APT28 used infrastructure to...
APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers
APT28 accesses poorly maintained Cisco routers and deploys malware on unpatched devices using CVE-2017-6742. Overview and Context The UK National Cyber Security Centre NCSC, the US National Security Agency NSA, US Cybersecurity and Infrastructure Security Agency CISA and US Federal Bureau of...
