HUMINT: Diving Deep into the Dark Web

Discover how cybercriminals behave in Dark Web forums- what services they buy and sell, what motivates them, and even how they scam each other. Clear Web vs. Deep Web vs. Dark Web Threat intelligence professionals divide the internet into three main components: Clear Web - Web assets that can be...

PT-2024-7956 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: The issue is related to improper authorization. It allows a remote attacker to gain unauthorized access to participant groups they should not have access to. The vulnerabili...

PT-2024-8749 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: A vulnerability has been identified in the Client Communication component of the SINEMA Remote Connect Server, where it does not properly implement brute force protection...

5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy

Events like the recent massive CDK ransomware attack – which shuttered car dealerships across the U.S. in late June 2024 – barely raise public eyebrows anymore. Yet businesses, and the people that lead them, are justifiably jittery. Every CISO knows that cybersecurity is an increasingly hot topic...

CVE-2024-34602

Use of implicit intent for sensitive communication in Samsung Messages prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information. User interaction is required for triggering this vulnerability...

CVE-2024-34602

CVE-2024-34602 concerns Samsung Messages prior to SMR Jul-2024 Release 1, where the use of implicit intents for sensitive communications can allow a local attacker to access sensitive information. The issue requires user interaction to trigger and is rooted in how intents expose sensitive data. A...

kernel: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry

A flaw was found in the Linux kernel’s IPC system. This flaw allows an attacker to use a specially crafted program to cause a rare race condition, leading to a denial of service...

Malicious code in textfx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f6802763dd48d6dac35423838aeb0d89a5e095be89203553f613264f4c314c16 The OpenSSF Package Analysis project identified 'textfx' @ 2.2.1 npm as malicious. It is considered malicious because: - The package communicate...

MAL-2024-7423 Malicious code in dependent-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 70f70c2dd1e2fa144fb729148ad1259433561dcfc205e028a514ea1fc4c6a65a The OpenSSF Package Analysis project identified 'dependent-package' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

DEBIAN-CVE-2024-36041

KSmserver in KDE Plasma Workspace aka plasma-workspace before 5.27.11.1 and 6.x before 6.0.5.1 allows connections via ICE based purely on the host, i.e., all local connections are accepted. This allows another user on the same machine to gain access to the session manager, e.g., use the...

CVE-2024-3904

Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tampe...

CVE-2024-3904

CVE-2024-3904 affects Mitsubishi Electric MELIPC Series MI5122-VW firmware versions 05–07. Root cause: Incorrect Default Permissions (CWE-276) enables a local attacker to execute arbitrary code by saving a malicious file to a specific folder. Impact per sources: disclosure/tampering/destruction o...

CVE-2024-3904

Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tampe...

CVE-2024-3904

Incorrect Default Permissions vulnerability in Smart Device Communication Gateway preinstalled on MELIPC Series MI5122-VW firmware versions "05" to "07" allows a local attacker to execute arbitrary code by saving a malicious file to a specific folder. As a result, the attacker may disclose, tampe...

Malicious code in addcriteria (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c8a650259b91088a362b09e041392896460946359bcf0b040ffed50c24de11a2 The OpenSSF Package Analysis project identified 'addcriteria' @ 69.69.69 npm as malicious. It is considered malicious because: - The package...

Missing key verification in gost

An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey...

CVE-2024-6470 playSMS Template injection

A vulnerability was found in playSMS 1.4.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php?app=main&inc=featureinboxgroup&op=list of the component Template Handler. The manipulation of the argument Receiver Number with the input id...

Malicious code in cra-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e49ccaa79a7296b7f1237beb3210cabf6610aab5c68e2c349b1fff4d3b2bb332 The OpenSSF Package Analysis project identified 'cra-docs' @ 7.999.45 npm as malicious. It is considered malicious because: - The package...

CVE-2024-39223

CVE-2024-39223 affects gost v2.11.5, where the SSH service can be compromised via an authentication bypass by configuring the HostKeyCallback to ssh.InsecureIgnoreHostKey. The Red Hat advisory reiterates the vulnerability description and references the same affected version, noting an authenticat...

The vulnerability of the PC Client component of the embedded applications and document management tools of Ricoh Streamline NX allows a perpetrator to execute arbitrary code.

The vulnerability of the PC Client component of the embedded applications and Ricoh Streamline NX document management tools is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...