8216 matches found
One-Lin3r v1.1 - Gives You One-Liners That Aids In Penetration Testing Operations
One-Lin3r is simple and light-weight framework inspired by the web-delivery module in Metasploit. It consists of various one-liners that aids in penetration testing operations: Reverser : Give it IP & port and it returns a reverse shell liner ready for copy & paste. Dropper : Give it an...
CVE-2018-1000203
Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...
Design/Logic Flaw
Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...
CVE-2018-1000203
Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...
CVE-2018-1000203
The CVE-2018-1000203 entry concerns Soar Labs Soar Coin, where versions up to git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest as of Sept 2017) contain an intentional backdoor in zero_fee_transaction() that can enable theft of Soar Coin by the account labeled "onlycentralAccount" after...
CVE-2018-1000203
Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...
Malicious Chrome & Edge extension drops backdoor and spy on users
By Waqas Trend Micro researchers have identified malicious Google Chrome and Microsoft This is a post from HackRead.com Read the original post: Malicious Chrome & Edge extension drops backdoor and spy on users...
SingTel Backdoor Detection (ForgotDoor)
The remote SingTel router may be contain a backdoor. Certain SingTel routers had their administrative web interfaces port-forwarded to public-facing addresses by customer support after users requested customer service. Depending on the configuration, the router may require no credentials, default...
CVE-2025-34117
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/netcoreudp53413backdoor.rb 2025-10-23 21:13:04+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-03-12 21:02:39+00:00| seen...
Despite Ringleader’s Arrest, Cobalt Group Still Active
Evidence has surfaced that the Cobalt Group – the threat actors behind widespread attacks on banks and ATM jackpotting campaigns across Europe – is continuing to operate, despite the arrest of its accused ringleader in March. The Cobalt Group, first burst on the scene in 2016: in a single night,...
Malicious PHP Script Infects 2,400 Websites in the Past Week
A botnet dubbed Brain Food is giving webmasters indigestion with related attacks that push bogus diet pills and IQ-boosting pills via web pages hosted on legitimate sites. So far, spammers have been successful, thanks to an effective Hypertext Preprocessor PHP script also called Brain Food that h...
CVE-2018-10968
On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices, aka a backdoor access vulnerability...
Improper access control
On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices, aka a backdoor access vulnerability...
CVE-2018-10968
On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unauthorized access to vulnerable devices, aka a backdoor access vulnerability...
CVE-2018-10968
The CVE-2018-10968 issue affects D-Link DIR-550A and DIR-604M (through v2.10KR). A backdoor-like vulnerability allows a malicious user to access vulnerable devices via a default TELNET account, enabling unauthorized access. Technical details in CNVD/CVE records confirm affected models and version...
Malicious Package
Overview The getcookies module contained a backdoor that would allow for a remote attacker to execute arbitrary commands on the system running the malicious module. Recommendation This module should be uninstalled if found used within an application. In addition to removing the installed module,...
RIG EK Still Makes Waves, This Time with a Stealthy Backdoor
Exploit kit activity has been declining since the latter half of 2016, but the RIG EK seems to buck the trend. It’s been involved in ongoing activity involving a wide range of crimeware payloads; and the latest campaign saw RIG dropping the Grobios malware, which is tailored to be a really stealt...
Unspecified Vulnerability in Actiontec WCB6200Q
The Actiontec WCB6200Q is a WiFi network extender from Actiontec USA. A security vulnerability exists in the Actiontec WCB6200Q prior to version 1.1.10.20a, which stems from the program failing to securely create an administrator login session cookie.An attacker could use this vulnerability to...
CVE-2018-10252
An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...
Code injection
An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...