Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-74 Malicious code in @amp-metrics/mt-metricskit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dc1a6d0bd9e4b7b4550c88d71ee7fbf5710733f5d34a7e91a0625ae7f4ebf7f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OilRig is back with another Phishing Email attack, delivering the Saitama Backdoor

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here An Iranian cyber espionage gang known as OilRig has began delivering malicious email to a Jordanian government employee at the foreign ministry. The email includes a malicious Excel sheet that installs the Saitama backdoor...

An In-Depth Look at ICS Vulnerabilities Part 2

In part two of our three-part series, we continue to analyze vulnerabilities using MITRE ATT&CK. We also look into the sectors affected and their risk levels...

CVE-2021-23150

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin = 1.0.77.31 versions...

CVE-2021-23150

Authenticated admin+ Stored Cross-Site Scripting XSS vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin = 1.0.77.31 versions...

CVE-2021-23209

Multiple Authenticated admin user role Persistent Cross-Site Scripting XSS vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin versions = 1.0.77.32...

Cross site scripting

Multiple Authenticated admin user role Persistent Cross-Site Scripting XSS vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin versions = 1.0.77.32...

CVE-2021-23209

The CVE-2021-23209 entry concerns the WordPress AMP for WP – Accelerated Mobile Pages plugin (versions ≤ 1.0.77.32). The vulnerability is multiple authenticated (admin role required) persistent cross-site scripting (XSS) vulnerabilities. The root cause details are not explicitly provided in the l...

CVE-2021-23209 WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated admin user role Persistent Cross-Site Scripting XSS vulnerabilities discovered in AMP for WP – Accelerated Mobile Pages WordPress plugin versions = 1.0.77.32...

CVE-2021-23150

The CVE-2021-23150 entry describes an Authenticated Stored Cross-Site Scripting (XSS) vulnerability in the WordPress AMP for WP – Accelerated Mobile Pages plugin up to version 1.0.77.31. Affected component: AMP for WP plugin; root cause: stored XSS exploitable by users with admin+ privileges. Imp...

WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin <= 1.0.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin versions = 1.0.2. Solution Update the WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin to th...

WordPress Pixel & tracking codes for Google Web stories (formerly AMP Stories) plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin versions = 1.0.2. Solution Update the WordPress Pixel & tracking codes for Google Web stories formerly AMP Stories plugin to the latest available versio...

2021 Cybersecurity Superlatives: An InsightIDR Year in Review

We laughed, we cried, we added over 750 new detections. It's been a rollercoaster of a year for everyone. So let's have some fun with our 2021 year in review — shall we? The last year was an exciting one for InsightIDR, Rapid7's industry-leading extended detection and response XDR and SIEM...

Mageia: Security Advisory (MGASA-2020-0322)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Measure the effectiveness of your Microsoft security with AttackIQ

This blog post is part of the Microsoft Intelligent Security Association guest blog series. Learn more about MISA. To improve an organization’s cybersecurity readiness, you need to test that your detection and prevention technologies work as intended and that your security program is performing a...

WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.32 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated Persistent Cross-Site Scripting XSS vulnerabilities discovered by Ex.Mi Patchstack in WordPress AMP for WP – Accelerated Mobile Pages plugin versions = 1.0.77.32. Solution Update the WordPress AMP for WP – Accelerated Mobile Pages plugin to the latest available version at...

Detect Exploitation Attempts With Qualys XDR (Beta)

The recently announced Log4JShell / CVE-2021-44228 exploit is the latest reminder of why it’s so important to maintain an enterprise-wide view of your security posture. The heart of the exploit centers around misuse of the JNDI lookup function built into log4j. Impact: There are multiple proofs o...

WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Tien Nguyen Anh vigov5 in WordPress AMP for WP – Accelerated Mobile Pages plugin versions = 1.0.77.31. Solution Update the WordPress AMP for WP – Accelerated Mobile Pages plugin to the latest available version at least...

VMware Response to Apache Log4j Remote Code Execution Vulnerabilities (CVE-2021-44228, CVE-2021-45046)

1. Impacted Products Under Evaluation VMware Horizon VMware vCenter Server VMware HCX VMware NSX-T Data Center VMware Unified Access Gateway VMware WorkspaceOne Access VMware Identity Manager VMware vRealize Operations VMware vRealize Operations Cloud Proxy VMware vRealize Automation VMware...