Attacks, Vulnerabilities and Actors 21 August to 27 August 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of twelve attacks executed, six vulnerabilities, and three different adversaries...

Cisco VPNs without MFA are under attack by ransomware operator

The Cisco Product Security Incident Response Team PSIRT has posted a blog about Akira ransomware targeting VPNs without Multi-Factor Authentication MFA. The Cisco team states that it is aware of reports of the Akira ransomware group going specifically after Cisco VPNs that are not configured for...

LockBit 3.0 Ransomware Builder Leak Gives Rise to Hundreds of New Variants

The leak of the LockBit 3.0 ransomware builder last year has led to threat actors abusing the tool to spawn new variants. Russian cybersecurity company Kaspersky said it detected a ransomware intrusion that deployed a version of LockBit but with a markedly different ransom demand procedure. "The...

New Wave of Akira Ransomware Expands Arsenal with Cisco VPN Flaws

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Akira ransomware group targets Cisco VPN to breach corporate networks and leverages tools like RustDesk for stealthy access. Avasts decryptor is ineffective against the groups updated ransomware...

New Akira Ransomware Targets Businesses via Exploited CISCO VPNs

By Deeba Ahmed Akira ransomware operators specialize in targeting corporate endpoints for stealing sensitive data. This is a post from HackRead.com Read the original post: New Akira Ransomware Targets Businesses via Exploited CISCO VPNs...

Ransomware groups claim responsibility for double-attack on Yamaha

Music giant Yamahas Canadian division has experienced a compromise on two different fronts, both related to ransomware. In an attack which has worrying echoes of the recent Estee Lauder attack, multiple attackers have claimed to breach the organisation. Yamaha Canada Music had the following to sa...

A New Akira Ransomware Targets Multiple Industries and Demands Millions in Extortion

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Akira ransomware is a new threat targeting corporate networks and has already attacked several companies in various industries, stealing their data and demanding ransom from $200,000 to millions of...

CentOS 5 : kernel (CESA-2015:0164)

Updated kernel packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Ruby hash table implementation vulnerable to denial-of-service

Overview The hash table implementation in Ruby contains a denial-of-service DoS vulnerability. The hash table implementation in Ruby contains an issue, where it may intentionally create a series of strings whose hash values collide. As a result, a denial-of-service DoS attack may be conducted...

Sql injection

SQL injection vulnerability in imagegallery.php in the Akira Powered Image Gallery imagegallery plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action...

CVE-2008-6466

SQL injection vulnerability in imagegallery.php in the Akira Powered Image Gallery imagegallery plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action...

CVE-2008-6466

SQL injection vulnerability in imagegallery.php in the Akira Powered Image Gallery imagegallery plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action...

CVE-2008-6466

The CVE-2008-6466 entry describes an SQL injection vulnerability in the Akira Powered Image Gallery (image_gallery) plugin for e107, specifically in image_gallery.php version 0.9.6.2. An attacker can supply a crafted image parameter in an image-detail action to execute arbitrary SQL commands on t...

CVE-2008-6466: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in imagegallery.php in the Akira Powered Image Gallery imagegallery plugin 0.9.6.2 for e107 allows remote attackers to execute arbitrary SQL commands via the image parameter in an image-detail action...

Debian DSA-1652-1 : ruby1.9 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service and other security problems. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3655 Keita Yamaguchi discovered that several safe...

Akira Powered Image Gallery 'function.php' SQL注入漏洞

BUGTRAQ ID: 31286 CNCAN ID：CNCAN-2008092301 Akira Powered Image Gallery是一款基于PHP的WEB应用程序。 Akira Powered Image Gallery不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'function.php'脚本对用户提交给'page'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Akira Powered Image Gallery 0.9.6.2 目前没有解决方案提供：...

e107 Plugin Image Gallery 0.9.6.2 (image) SQL Injection Vulnerability

No description provided by source. e107 Plugin Akira Powered's "Image Gallery" Remote SQL-injetion Vulnerability Author: boom3rang Site: www.khg-crew.ws Greetz: KHG & H!tm@N & chs & redc00de & proxy-ki11er Site: www.khg-crew.ws - Download Plugin: http://www.akirapowered.org/download.php?view.73 -...

e107 Plugin Image Gallery 0.9.6.2 - SQL Injection

e107 Plugin Image Gallery 0.9.6.2 - SQL Injection e107 Plugin Akira Powered's "Image Gallery" Remote SQL-injetion Vulnerability Author: boom3rang Site: www.khg-crew.ws Greetz: KHG & H!tm@N & chs & redc00de & proxy-ki11er Site: www.khg-crew.ws - Download Plugin:...

e107 Plugin Image Gallery 0.9.6.2 - SQL Injection

e107 Plugin Akira Powered's "Image Gallery" Remote SQL-injetion Vulnerability Author: boom3rang Site: www.khg-crew.ws Greetz: KHG & H!tm@N & chs & redc00de & proxy-ki11er Site: www.khg-crew.ws - Download Plugin: http://www.akirapowered.org/download.php?view.73 - Dork:...