Design/Logic Flaw

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The...

CVE-2017-20084

CVE-2017-20084 affects JUNG Smart Visu Server versions 1.0.804, 1.0.830, 1.0.832. The issue involves the KNX Group Address component, where manipulation can lead to a backdoor. Local access is required to exploit, and publicly disclosed exploit information exists. Mitigation per sources is to upg...

CVE-2017-20084 JUNG Smart Visu Server KNX Group Address backdoor

A vulnerability has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832 and classified as critical. Affected by this vulnerability is an unknown functionality of the component KNX Group Address. The manipulation leads to backdoor. Local access is required to approach this attack. The...

CVE-2017-20083 JUNG Smart Visu Server SSH Server backdoor

A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and...

CVE-2017-20083

CVE-2017-20083 affects JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Connected sources describe two undocumented OS user accounts on the device enabling SSH access, which can be abused to create a backdoor locally. The issue is rooted in unauthorized accounts and leads to remote access compromi...

CVE-2017-20083 JUNG Smart Visu Server SSH Server backdoor

A vulnerability, which was classified as critical, was found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. Affected is an unknown function of the component SSH Server. The manipulation leads to backdoor. An attack has to be approached locally. The exploit has been disclosed to the public and...

CVE-2017-20082

The CVE-2017-20082 vulnerability affects JUNG Smart Visu Server versions 1.0.804/1.0.830/1.0.832. It enables a backdoor through two undocumented OS user accounts, allowing local SSH access and potentially exposing confidential information. The issue is described as requiring local access and has ...

CVE-2017-20082 JUNG Smart Visu Server backdoor

A vulnerability, which was classified as problematic, has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. This issue affects some unknown processing. The manipulation leads to backdoor. The attack needs to be approached locally. The exploit has been disclosed to the public and may b...

CVE-2017-20082 JUNG Smart Visu Server backdoor

A vulnerability, which was classified as problematic, has been found in JUNG Smart Visu Server 1.0.804/1.0.830/1.0.832. This issue affects some unknown processing. The manipulation leads to backdoor. The attack needs to be approached locally. The exploit has been disclosed to the public and may b...

New ToddyCat Hacker Group on Experts' Radar After Targeting MS Exchange Servers

An advanced persistent threat APT actor codenamed ToddyCat has been linked to a string of attacks aimed at government and military entities in Europe and Asia since at least December 2020. The relatively new adversarial collective is said to have commenced its operations by targeting Microsoft...

APT ToddyCat

ToddyCat is a relatively new APT actor that we have not been able to relate to other known actors, responsible for multiple sets of attacks detected since December 2020 against high-profile entities in Europe and Asia. We still have little information about this actor, but we know that its main...

Mitel 6800/6900 Series SIP Phones Backdoor Access Vulnerability

Mitel 6800/6900 Series SIP Phones excluding 6970 and Mitel 6900 Series IP MiNet Phones have a flow to spawn a telnet backdoor on the device with a static root password enabled. Affected versions include Rel 5.1 SP8 5.1.0.8016 and earlier, Rel 6.0 6.0.0.368 to 6.1 HF4 6.1.0.165, and MiNet 1.8.0.12...

Nexans FTTO GigaSwitch Outdated Components / Hardcoded Backdoor Vulnerability

Nexans FTTO GigaSwitch industrial/office switches HW version 5 suffer from having a hardcoded backdoor user and multiple outdated vulnerable software components. ======================================================================= title: Hardcoded Backdoor User and Outdated Software Components...

Malicious code in angular-directive-seed (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b65edec48fbdec50ab250165d39a7a767dc0050c8c47dc15b9d929f8b120dc65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in acs-ui-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7eb198d76eddd8c49bac72bea49559b8d349e2d762170f0312a5ff9736969a0b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tulip-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c48e97ac65122c64d5d3b30ae0ff6def013c6ba12b9234659eef1e37de6e9bf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mitui-util-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 38c4d196757b399f9b5ea471bc1e80f3442e54977dee818144e75a4ab9d6a49e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xendke-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08c5500b7eef8bfb2a53d208d318fb9bd090cb1f6b7faa85f4238b4577a95579 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in education-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47a270e66a10d69bf55d322dbdad8e5f7c6ccdebf5e951e0e6a89392d68da5dc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in com.unity.modules.unitywebrequestwww (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f0dae88788735360f7a8d0c54e10a2b3ed56d207895102fe4a57e75f151db8d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...