9798 matches found
org.eclipse.jetty.aggregate:jetty-all (8.1.18.v20150929), org.eclipse.jetty.aggregate:jetty-all-server (8.1.18.v20150929) +5 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.18.v20150929)
org.eclipse.jetty:jetty-servlets MAVEN version 8.1.18.v20150929 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.18.v20150929 -...
org.eclipse.jetty.aggregate:jetty-all (8.1.19.v20160209), org.eclipse.jetty.aggregate:jetty-all-server (8.1.19.v20160209) +17 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.19.v20160209)
org.eclipse.jetty:jetty-servlets MAVEN version 8.1.19.v20160209 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.19.v20160209 -...
org.eclipse.jetty.aggregate:jetty-all (8.1.20.v20160902), org.eclipse.jetty.aggregate:jetty-all-server (8.1.20.v20160902) +4 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.20.v20160902)
org.eclipse.jetty:jetty-servlets MAVEN version 8.1.20.v20160902 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.eclipse.jetty.aggregate:jetty-all 8.1.20.v20160902 -...
org.apache.jena:jena-fuseki1 (>=3.4.0, <=3.9.0), org.eclipse.jetty.aggregate:jetty-all (8.1.22.v20160922) +7 more potentially affected by CVE-2021-28169 via org.eclipse.jetty:jetty-servlets (8.1.22.v20160922)
org.eclipse.jetty:jetty-servlets MAVEN version 8.1.22.v20160922 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-servlets and may be impacted: - org.apache.jena:jena-fuseki1 =3.4.0, =4.0.4, =4.1.1 Source cves: CVE-2021-28169 Sour...
SUSE SLES11 Security Update : openssl1 (SUSE-SU-2020:14560-1)
The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14560-1 advisory. - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL...
OracleVM 3.4 : openssl (OVMSA-2021-0011)
The remote OracleVM system is missing necessary patches to address security updates: - The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERALNAMEcmp which compares different...
SUSE: Security Advisory (SUSE-SU-2018:0865-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google PPC Ads Used to Deliver Infostealers
Researchers have tracked down the origins of several increasingly prevalent info-stealers – including Redline, Taurus, Tesla and Amadey – that threat actors are delivering via pay-per-click PPC ads in Google’s search results. On Wednesday, breach prevention firm Morphisec posted an advisory in...
DRUPAL-CONTRIB-2021-011
Open Social is a Drupal distribution for online communities. The included social\magic\login module doesn't sufficiently validate magic login URLs for user accounts. The lack of validation makes it possible for an adversary to forge valid login URLs and login to such an account. This vulnerabilit...
DRUPAL-CONTRIB-2021-010
This Open Social distribution provides a turn-key system for building customized social networks. The module doesn't sufficiently process data in certain circumstances. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "access mentions"...
US Seizes Domains Used by SolarWinds Hackers in Cyber Espionage Attacks
Days after Microsoft, Secureworks, and Volexity shed light on a new spear-phishing activity unleashed by the Russian hackers who breached SolarWinds IT management software, the U.S. Department of Justice DoJ Tuesday said it intervened to take control of two command-and-control C2 and malware...
Revisiting the NSIS-based crypter
This blog post was authored by hasherezade NSIS Nullsoft Scriptable Install System is a framework dedicated to creating software installers. It allows to bundle various elements of an application together i.e. the main executable, used DLLs, configs, along with a script that controls where are th...
Evolution of JSWorm ransomware
Introduction Over the past few years, the ransomware threat landscape has been gradually changing. We have been witness to a paradigm shift. From the massive outbreaks of 2017, such as WannaCry, NotPetya, and Bad Rabbit, a lot of ransomware actors have moved to the covert but highly profitable...
ZeroShell kerbynet remote command execution
Added: 05/24/2021 Background Zeroshell is a Linux distribution designed for router and firewall appliances which can be administered from a web interface. Zeroshell is no longer supported. Problem A command injection vulnerability allows unauthenticated attackers to execute arbitrary commands by...
Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment
Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...
Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment
Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...
[SECURITY] [DSA 4918-1] ruby-rack-cors security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4918-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso May 18, 2021 https://www.debian.org/security/faq -...
70 European and South American Banks Under Attack By Bizarro Banking Malware
A financially motivated cybercrime gang has unleashed a previously undocumented banking trojan, which can steal credentials from customers of 70 banks located in various European and South American countries. Dubbed "Bizarro" by Kaspersky researchers, the Windows malware is "using affiliates or...
Debian DSA-4916-1 : prosody - security update
Multiple security issues were found in Prosody, a lightweight Jabber/XMPP server, which could result in denial of service or information disclosure. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...
Debian DSA-4915-1 : postgresql-11 - security update
Multiple security issues have been discovered in the PostgreSQL database system, which could result in the execution of arbitrary code or disclosure of memory content. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...