43 matches found
CVE-2024-10669
The Countdown Timer block – Display the events date into a timer. plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.4 via the ctb shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authenticated...
CVE-2020-27665
In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB aka content-type-builder routes...
ctbdigital.com.br Cross Site Scripting vulnerability OBB-1318437
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
The vulnerability of the ihevcd_sao_shift_ctb function in the Android operating system allows a hacker to disclose protected information.
The vulnerability of the ihevcdsaoshiftctb function ihevcdsao.c in the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...
Google Android out-of-bounds write vulnerability (CNVD-2019-01565)
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An out-of-bounds write vulnerability exists in ihevcdsao.c of ihevcdsaoshiftctb in Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. The vulnerability stems from a lack ...
CVE-2018-9552
In ihevcdsaoshiftctb of ihevcdsao.c there is a possible out of bounds write due to missing bounds check. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1...
CVE-2018-13077
The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
Integer overflow
The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...
Google Android ihevcd_ctb_boundary_strength_pbslice Absolute Service Vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. libhevc is one of the hevc decoding libraries. A denial of service vulnerability exists in ihevcdctbboundarystrengthpbslice of libhevc in Android. A remote attacker can exploit thi...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Romanian Police Arrest 5 People for Spreading CTB Locker and Cerber Ransomware
Romanian police have arrested five individuals suspected of infecting tens of thousands of computers across Europe and the United States in recent years by spreading two infamous ransomware families—Cerber and CTB Locker. Under Operation Bakovia—a major global police operation conducted by Europo...
McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker
ARCHIVED STORY McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker By Trellix · December 20, 2017 In our recent research, we interviewed the actors behind ransomware campaigns. One of the interesting findings was cybercriminals seemed to...
McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker
ARCHIVED STORY McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker By Trellix · December 20, 2017 In our recent research, we interviewed the actors behind ransomware campaigns. One of the interesting findings was cybercriminals seemed to...
Ransomware Roundup: Alternative Techniques featuring CTB-Faker
Ransomware is innovating to spread faster, hit harder and increase its payout potential. New unknown variants pop up daily, and many leverage non-malware techniques to evade traditional defenses. CTB-Faker is a perfect example of how modern ransomware is leveraging these new techniques to easily...
Multiple PHP Webservers Ransomware Upload
A file upload vulnerability exists in various PHP webservers. Successful exploitation of this vulnerability could allow a remote attacker to execute PHP Ransomware code on the compromised server. This method is often used by ransomware such as EV, Lalabitch, JapanLocker, CTB-Locker and others...
Researchers Break MarsJoke Ransomware Encryption
Victims infected with the MarsJoke ransomware can decrypt their files after researchers last week cracked the encryption in the CTB-Locker lookalike. A trio of researchers from Kaspersky Lab’s Anti-Ransom Team–Anton Ivanov, Orkhan Mamedov, and Fedor Sinitsyn–described Monday how errors in the...
CTB-Locker Ransomware Spreading Rapidly, Infects Thousands of Web Servers
Ransomware has steadily evolved over the past decade, moving from isolated attacks on individual computers to wider campaigns that disrupt entire services. Families such as Cryptowall and Locky showed how quickly file-encrypting malware could spread across Windows systems. Researchers are now...
CTB-Locker/Critroni Finds New Legs Targeting Websites
After months of relative dormancy, ransomware CTB-Locker or Critroni is back and this time finding new life targeting websites. Researchers are calling this variant “CTB-Locker for Websites” because it targets websites, encrypts their content, and demands a 0.4 bitcoin $425 ransom for access to t...
Windows 10 Upgrade Spam Carries CTB-Locker Ransomware
In the week since a free upgrade to Windows 10 was made available, users have learned a of about a host of built-in privacy and security issues, the most troubling being a native feature called Wi-Fi Sense that grants access to your Wi-Fi network to contacts stored in a host of online services. N...
New Spam Campaign Pushing CTB-Locker Ransomware
A new run of spam messages this week has been spotted dropping CTB-Locker ransomware. CTB-Locker, also known as Critroni, is a fairly new piece of crypto ransomware that encrypts hard drives and demands a ransom paid in Bitcoin to the attackers in exchange for the decryption key. Two days ago,...