IcedID Malware Strikes Again: Active Directory Domain Compromised in Under 24 Hours

A recent IcedID malware attack enabled the threat actor to compromise the Active Directory domain of an unnamed target less than 24 hours after gaining initial access, while also borrowing techniques from other groups like Conti to meet its goals. "Throughout the attack, the attacker followed a...

Alert: Hackers Actively Exploiting Critical "Control Web Panel" RCE Vulnerability

Malicious actors are actively attempting to exploit a recently patched critical vulnerability in Control Web Panel CWP that enables elevated privileges and unauthenticated remote code execution RCE on susceptible servers. Tracked as CVE-2022-44877 CVSS score: 9.8, the bug impacts all versions of...

PatchWork gang dropped a variant of the BADNEWS Trojan

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Patchwork deployed a variant of the BADNEWS Ragnatela Remote Administration Trojan that employed malicious RTF files in its most recent campaign. The groups project name and control panel are named...

CVE-2022-30332

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of...

CVE-2022-30332

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of...

Default credentials

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of...

Microsoft Windows Win32k 安全漏洞

Microsoft Windows Win32k is a system file for Windows multi-user administration from Microsoft USA. A security vulnerability exists in Microsoft Windows Win32k. An attacker can exploit the vulnerability to elevate privileges...

Talend Administration Center 授权问题漏洞

Talend Administration Center is a web-based application from Talend USA that centralizes studio management. A security vulnerability exists in Talend Administration Center 7.3.1.20200219 prior to TAC-15950. An attacker exploits the vulnerability to enumerate accounts through a series of requests...

CVE-2022-30332

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of...

CVE-2022-30332

Talend Administration Center 7.3.1.20200219 before TAC-15950 is affected. The vulnerability arises from the Forgot Password flow, which reveals different error messages depending on whether the email is linked to an account, enabling remote account enumeration. The in-scope impact is user enumera...

CVE-2022-30332

In Talend Administration Center 7.3.1.20200219 before TAC-15950, the Forgot Password feature provides different error messages for invalid reset attempts depending on whether the email address is associated with any account. This allows remote attackers to enumerate accounts via a series of...

PT-2023-13003 · Talend · Talend Administration Center

Name of the Vulnerable Software and Affected Versions: Talend Administration Center version 7.3.1.20200219 Description: The Forgot Password feature in the affected software provides different error messages for invalid reset attempts depending on whether the email address is associated with any...

01ACP 跨站脚本漏洞

01ACP is a central administration area for all modules of 01-Scripts.de by Michael Individual Developer. A cross-site scripting vulnerability exists in 01ACP 01-Artikelsystem, which originates from an unknown function in the file 01article.php. Manipulation of the parameter $SERVER PHPSELF result...

Security Bulletin: Vulnerabilities in FasterXML affects IBM Common Licensing's Administration And Reporting Tool (ART) and its Agent (217968, CVE-2020-36518)

Summary Security Vulnerablities have been addressed in IBM Common Licensing. Faster-XML Jackson is a JSON to Java object conversion API 217968, CVE-2020-36518. A fix is available to address the vulnerability. Vulnerability Details CVEID:CVE-2020-36518 DESCRIPTION: FasterXML jackson-databind is...

CVE-2022-30519

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field...

Code injection

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field...

PT-2022-20156 · Reprise · Reprise Software Rlm License Administration

Name of the Vulnerable Software and Affected Versions: Reprise Software RLM License Administration version 14.2BL4 Description: The issue allows a remote attacker to inject arbitrary code via the password field in the signing form, potentially leading to code execution. Recommendations: For Repri...

CVE-2022-30519

CVE-2022-30519 affects Reprise Software RLM License Administration v14.2BL4. The issue is an XSS in the signing form’s password field that allows a remote attacker to inject arbitrary code. Exploitation details and PoCs are present in connected sources (e.g., exploit-db/packetstorm). The document...

CVE-2022-30519

XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field...

Reprise Software RLM License Administration 跨站脚本漏洞

Reprise Software RLM License Administration is a software licensing toolkit from US-based Reprise Software. Publishers of commercial software applications provide local and cloud-based license management, license enforcement and product activation solutions. A security vulnerability exists in...