vSphere_selfuse 安全漏洞

vSphereselfuse is a vSphere automation attempt project by Henry Sun Personal Developer. A security vulnerability exists in vSphereselfuse commit number: 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749, which stems from the fact that it allows an attacker to execute a backdoor through the code of a reque...

CVE-2022-46997

CVE-2022-46997 relates to Passhunt. Connected sources describe a code execution backdoor in Passhunt at commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 introduced via the request package. The vulnerability is said to allow attackers to access sensitive user information and digital currency keys a...

CVE-2022-46997

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-46996

vSphereselfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-46996

vSphereselfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-46609

The CVE-2022-46609 entry concerns Python3-RESTfulAPI, affecting the code path in the project tied to commits d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74. A root cause is described as a code execution backdoor introduced via the request package, enabling a...

PT-2022-27929 · Unknown · Python3-Restfulapi

Name of the Vulnerable Software and Affected Versions: Python3-RESTfulAPI versions d9907f14e9e25dcdb54f5b22252b0e9452e3970e through e772e0beee284c50946e94c54a1d43071ca78b74 Description: The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate...

CVE-2022-46609

Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well ...

PT-2022-28016 · Passhunt · Passhunt

Name of the Vulnerable Software and Affected Versions: Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 Description: The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges via a code execution backdoor in the request...

CVE-2022-46996

The CVE-2022-46996 entries describe a code execution backdoor in the vSphere selfuse project, tied to commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 via the request package. Affected software is vSphere selfuse (commit/version shown in PT-2022-28015); underlying issue is a backdoor that can exfi...

PT-2022-28015 · Vmware · Vsphere

Name of the Vulnerable Software and Affected Versions: vSphere selfuse version 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 Description: The issue allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges via a code execution backdoor in the reque...

Backdoor.Win32.InCommander.17.b MVID-2022-0665 Hardcoded Credentials

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/dd76d8a5874bf8bf05279e35c68449ca.txt Contact: [email protected] Media: twitter.com/malvuln Backup media: infosec.exchange/@malvuln Threat: Backdoor.Win32.InCommander.17.b Vulnerability:...

Passhunt 安全漏洞

Passhunt is a simple tool open source by Viral Maniar. Used to search for default credentials for network devices , web applications , etc. . Passhunt commit number: 54eb987d30ead2b8ebbf1f0b880aa14249323867 suffers from a security vulnerability that stems from the fact that it allows an attacker ...

CVE-2022-46609

Python3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well ...

CVE-2022-46997

Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

DEV-0139 launches targeted attacks against the cryptocurrency industry

Over the past several years, the cryptocurrency market has considerably expanded, gaining the interest of investors and threat actors. Cryptocurrency itself has been used by cybercriminals for their operations, notably for ransom payment in ransomware attacks, but we have also observed threat...

Chinese Hackers Target Middle East Telecoms in Latest Cyber Attacks

A malicious campaign targeting the Middle East is likely linked to BackdoorDiplomacy, an advanced persistent threat APT group with ties to China. The espionage activity, directed against a telecom company in the region, is said to have commenced on August 19, 2021 through the successful...

PT-2022-27088 · Franklin Fueling Systems · Ffs Colibri

Name of the Vulnerable Software and Affected Versions: Franklin Fueling System FFS Colibri version 1.9.22.8925 Description: The issue allows an attacker to overwrite system files, such as system.conf and passwd, due to the insecure usage of the fopen system function with the mode wb, which allows...

North Korean APT37 Unleashes Dolphin Backdoor on South Korea

By Habiba Rashid The backdoor is equipped with a wide range of spying capabilities, including exfiltrating files, keylogging, and stealing browser data, etc. This is a post from HackRead.com Read the original post: North Korean APT37 Unleashes Dolphin Backdoor on South Korea...

CVE-2022-45562

Insecure permissions in Telos Alliance Omnia MPX Node v1.0.0 to v1.4.9 allow attackers to manipulate and access system settings with backdoor account low privilege, this can lead to change hardware settings and execute arbitrary commands in vulnerable system functions that is requires high...