The vulnerability in the web interface for managing Cisco BroadWorks Application Server, Cisco BroadWorks Xtended Services Platform, and BroadWorks Application Delivery Platform allows a attacker to carry out cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco BroadWorks Application Server, Cisco BroadWorks Xtended Services Platform, and BroadWorks Application Delivery Platform exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a...

The vulnerabilities of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller), the Citrix Gateway virtual environment access control system (formerly Citrix NetScaler Gateway), and the Citrix SD-WAN WANOP network management software are related to authentication process flaws, allowing attackers to compromise the confidentiality and integrity of protected information.

The vulnerabilities of the Citrix ADC application delivery controller previously called Citrix NetScaler Application Delivery Controller, the Citrix Gateway virtual environment access control system previously called Citrix NetScaler Gateway, and the Citrix SD-WAN WANOP network management softwar...

Akamai Cloud: The World’s Most Distributed Cloud Platform

Introducing Akamai Connected Cloud, the massively distributed edge and cloud platform for cloud computing, security, and content delivery...

Hackers Targeting U.S. and German Firms Monitor Victims' Desktops with Screenshotter

A previously unknown threat actor has been targeting companies in the U.S. and Germany with bespoke malware designed to steal confidential information. Enterprise security company Proofpoint, which is tracking the activity cluster under the name Screentime , said the group, dubbed TA866 , is like...

Malicious code in discord-webook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 71ecf6fb771b9ea3bbea4f5b7b78892ccdcb73c207d05185baeb26865164ad07 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in websockte-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 46dc95128425fd18d1e428f8e8140e1c77935e999dc5c03d669210faa3bb7e92 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Enigma, Vector, and TgToxic: The New Threats to Cryptocurrency Users

Suspected Russian threat actors have been targeting Eastern European users in the crypto industry with fake job opportunities as bait to install information-stealing malware on compromised hosts. The attackers "use several highly obfuscated and under-development custom loaders in order to infect...

NewsPenguin Threat Actor Unleashes Malicious Attacks on Pakistani Firms

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary A recently identified adversary, referred to as NewsPenguin, has been associated with a sophisticated phishing campaign targeting Pakistani organizations. The attacker employs a highly intricate payload...

Malicious code in cryptocompaer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9555d55891d13e87d790b0eb171419cee3fff49661e7e0e03f8389a1c56eb6bf Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

The vulnerability of the declarative delivery tool for GitOps in Kubernetes Argo CD allows attackers to increase their privileges.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

CVE-2023-25163

CVE-2023-25163 affects Argo CD (kubernetes GitOps tool). All versions starting with v2.6.0-rc1 have an output sanitization bug that leaks repository access credentials in error messages, which are visible to users and logged. The vulnerability can be triggered when creating/updating an Applicatio...

CVE-2023-25163 Argo CD leaks repository credentials in user-facing error messages and in logs

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output sanitization bug which leaks repository access credentials in error messages. These error messages are visible to the user, and they are logged. The error...

Malware Delivered through Google Search

Criminals using Google search ads to deliver malware isnt new, but Ars Technica declared that the problem has become much worse recently. The surge is coming from numerous malware families, including AuroraStealer, IcedID, Meta Stealer, RedLine Stealer, Vidar, Formbook, and XLoader. In the past,...

GuLoader Malware Using Malicious NSIS Executables to Target E-Commerce Industry

E-commerce industries in South Korea and the U.S. are at the receiving end of an ongoing GuLoader malware campaign, cybersecurity firm Trellix disclosed late last month. The malspam activity is notable for transitioning away from malware-laced Microsoft Word documents to NSIS executable files for...

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware

In a continuing sign that threat actors are adapting well to a post-macro world, it has emerged that the use of Microsoft OneNote documents to deliver malware via phishing attacks is on the rise. Some of the notable malware families that are being distributed using this method include AsyncRAT,...

Print Invoice & Delivery Notes for WooCommerce < 4.7.2 - Reflected XSS

The plugin is vulnerable to reflected XSS by echoing a GET value in an admin note within the WooCommerce orders page. This means that this vulnerability can be exploited for users with the editothersshoporders capability. WooCommerce must be installed and active. This vulnerability is caused by a...

F5 BIG-IP SIP profile denial of service vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP SIP profile, where undisclosed traffic could cause TMM to terminate...

F5 BIG-IP Denial of Service Vulnerability (CNVD-2023-05950)

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in F5 BIG-IP that can be exploited to cause TMM to terminate when an HTT profile is...

F5 BIG-IP DNS profile denial of service vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP DNS profile, where the Rapid Response Mode RRM setting is turned on...

F5 iControl REST and TMSH Privilege Management Improper Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. F5 iControl REST and TMSH have improper privilege management, and an authenticated attacker with resource administrator role...