CVE-2023-1570 syoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow

A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function interceptormemcpy of the file tinydngloader.h. The manipulation leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has been...

Emotet Rises Again: Evades Macro Security via OneNote Attachments

The notorious Emotet malware, in its return after a short hiatus, is now being distributed via Microsoft OneNote email attachments in an attempt to bypass macro-based security restrictions and compromise systems. Emotet, linked to a threat actor tracked as Gold Crestwood, Mummy Spider, or TA542,...

Unchecked return value of call will allow to send messages marked as sent but will fail due to not enough gas

Lines of code Vulnerability details Impact On the sendTol1 function, they are sending the message via the SystemContractHelper: SystemContractHelper.toL1true, bytes32uint256uint160msg.sender, hash; the problem relies on the fact that they are not checking whether the message was actually sent...

Emotet adopts Microsoft OneNote attachments

Last week, Emotet returned after a three month absence when the botnet Epoch 4 started sending out malicious emails with malicious Office macros. While the extracted attachments were inflated to several hundred megabytes, it was surprising to see that Emotet persisted in using the same attack...

Tick APT Targeted High-Value Customers of East Asian Data-Loss Prevention Company

A cyberespionage actor known as Tick has been attributed with high confidence to a compromise of an East Asian data-loss prevention DLP company that caters to government and military entities. "The attackers compromised the DLP company's internal update servers to deliver malware inside the...

Android App "Wolt Delivery: Food and more" uses a hard-coded API key for an external service

Overview Android App "Wolt Delivery: Food and more" provided by Wolt uses a hard-coded API key for an external service CWE-798. Naoya Kurosawa of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Threat Actors Exploit Microsoft OneNote for Malware Delivery via Phishing Attacks

Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary Cybercriminals are using Microsoft OneNotes ability to embed files to deliver malware to users via social engineering techniques. OneNote allows users to organize...

Malicious code in selfstudytoolrandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96bf68235754ce923b2685242740d39b1a44690bd9a02dfb799923b5830fc8c2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Debian: Security Advisory (DLA-61-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-20180

A vulnerability classified as critical has been found in Zerocoin libzerocoin. Affected is the function CoinSpend::CoinSpend of the file CoinSpend.cpp of the component Proof Handler. The manipulation leads to insufficient verification of data authenticity. Continious delivery with rolling release...

Design/Logic Flaw

A vulnerability classified as critical has been found in Zerocoin libzerocoin. Affected is the function CoinSpend::CoinSpend of the file CoinSpend.cpp of the component Proof Handler. The manipulation leads to insufficient verification of data authenticity. Continious delivery with rolling release...

CVE-2015-10091 ByWater Solutions bywater-koha-xslt systempreferences.pl StringSearch sql injection

A vulnerability has been found in ByWater Solutions bywater-koha-xslt and classified as critical. This vulnerability affects the function StringSearch of the file admin/systempreferences.pl. The manipulation of the argument name leads to sql injection. The attack can be initiated remotely...

U.S. Cybersecurity Agency Raises Alarm Over Royal Ransomware's Deadly Capabilities

The U.S. Cybersecurity and Infrastructure Security Agency CISA has released a new advisory about Royal ransomware, which emerged in the threat landscape last year. "After gaining access to victims' networks, Royal actors disable antivirus software and exfiltrate large amounts of data before...

CVE-2023-1157

A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elfparser::Elfparser::getsegments of the file elfparser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclos...

Information disclosure

A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elfparser::Elfparser::getsegments of the file elfparser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclos...

CVE-2023-1157 finixbit elf-parser elf_parser.cpp get_segments denial of service

A vulnerability, which was classified as problematic, was found in finixbit elf-parser. Affected is the function elfparser::Elfparser::getsegments of the file elfparser.cpp. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclos...

CVE-2023-1157

The CVE-2023-1157 issue affects finixbit elf-parser, specifically the function elf_parser::Elf_parser::get_segments in elf_parser.cpp. The manipulation leads to a denial of service and requires local access. Exploitation details have been disclosed publicly, but the initial document provides no v...

Changing Healthcare Delivery Requires Evolving Security Strategies

...

New Cryptojacking Campaign Leverages Misconfigured Redis Database Servers

Misconfigured Redis database servers are the target of a novel cryptojacking campaign that leverages a legitimate and open source command-line file transfer service to implement its attack. "Underpinning this campaign was the use of transfer.sh," Cado Security said in a report shared with The...

Integer overflow

A vulnerability was found in SerenityOS. It has been rated as critical. Affected by this issue is the function initializetypedarrayfromarraybuffer in the library Userland/Libraries/LibJS/Runtime/TypedArray.cpp. The manipulation leads to integer overflow. The exploit has been disclosed to the publ...