230 matches found
Ransomware Attackers Publish 4K Private Scottish Gov Agency Files
On the heels of a ransomware attack against the Scottish Environmental Protection Agency SEPA, attackers have now reportedly published more than 4,000 files stolen from the agency – including contracts and strategy documents. After hitting SEPA on Christmas Eve with the attack, cybercriminals...
Payment Processing Giant TSYS: Ransomware Incident “Immaterial” to Company
Payment card processing giant TSYS suffered a ransomware attack earlier this month. Since then reams of data stolen from the company have been posted online, with the attackers promising to publish more in the coming days. But the company says the malware did not jeopardize card data, and that th...
Dental clinic learns of ransomware attack after phone call from hackers
By Waqas The ransomware attack was carried out by the Conti ransomware operator in November 2020. A dental clinic in Georgia, Galstan & Ward Family and Cosmetic Dentistry, suffered a ransomware attack. Interestingly, the facility discovered it after the attackers called to inform them about the...
Conti Gang Hits IoT Chipmaker Advantech with $14M Ransom Demand
Advantech, the chip manufacturer, has confirmed that it received a ransom note from a Conti ransomware operation on Nov. 26 demanding 750 Bitcoin, which translates into about $14 million, to decrypt compromised files and delete the data they stole. Just to let Advantech know they weren’t bluffing...
Ransomware Activity Targeting the Healthcare and Public Health Sector
Summary This advisory was updated to include information on Conti, TrickBot, and BazarLoader, including new IOCs and Yara Rules for detection. This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® version 7 framework. See the ATT&CK for Enterprise version 7 f...
TAU Threat Advisory: Imminent Ransomware threat to U.S. Healthcare and Public Health Sector
The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency CISA issued a joint alert this week with regards to an imminent cybercrime threat to US hospitals and healthcare providers. The alert was coauthored by CISA, the Federal Bureau of Investigation FBI, and the...
conti-trans.de Cross Site Scripting vulnerability OBB-1345388
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
conti-trans.de Cross Site Scripting vulnerability OBB-1335874
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
US Criminal Court hit by Conti ransomware; critical data at risk
By Waqas Conti ransomware operators attacked the Fourth District Court of Louisiana and posted proof of attack on the Dark Web. This is a post from HackRead.com Read the original post: US Criminal Court hit by Conti ransomware; critical data at risk...
neumaticos-conti.com.ar XSS vulnerability
Vulnerable URL: http://www.neumaticos-conti.com.ar/www/neumaticosanes/Search.html?q=%22%3E%3Ciframe%2Fonload%3Dprompt%28%27XSSposed%27%29%3E=asSearch Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 10:15 GMT Vulnerability type:| XSS Vulnerabili...
conti-online.com XSS vulnerability
Vulnerable URL: http://www.conti-online.com/www/automotivekrkr/Search.html?q=%22%3E%3Ciframe%2Fonload%3Dprompt%28%27XSSposed%27%29%3E=asSearch Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 10:12 GMT Vulnerability type:| XSS Vulnerability...
Command injection
Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...
CVE-2007-3492
Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...
CVE-2007-3492
Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...
CVE-2007-3492
The vulnerability CVE-2007-3492 affects Conti FtpServer 1.0, where remote authenticated users can trigger a denial of service (daemon crash) by sending a crafted string containing "//A:" in the LIST command argument. The connected documents provide the same description across NVD and CVE records ...
contiftp-dos.txt
Conti FTP Server v1.0 Denial of Service author: 35c666 contact: : Download: http://www.procesualitatea.ro/bestplay/ContiFtpServerSetup.exe Bug: Conti Ftp Server crashes when a large //A: string is sent, denying legitimate users access to their accounts. greetz to all RST members at...
CVE-2007-3492: Undefined Security Weakness
Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...
Conti FTP Server DoS
LIST //A: request causes server to hang...
Conti FTP Server v1.0 DoS
Conti FTP Server v1.0 Denial of Service author: 35c666 contact: : Download: http://www.procesualitatea.ro/bestplay/ContiFtpServerSetup.exe Bug: Conti Ftp Server crashes when a large //A: string is sent, denying legitimate users access to their accounts. greetz to all RST members at...
Conti FTP Server 1.0 - Large String Denial of Service
Conti FTP Server 1.0 - Large String Denial of Service source: https://www.securityfocus.com/bid/24672/info The Conti FTP Server is prone to a denial-of-service vulnerability. A remote attacker may be able to exploit this issue to deny service to legitimate users of the application. Conti FTP Serv...