4447 matches found
Drive-by mining and ads: The Wild Wild West
There seems to be a trend lately for publishers to monetize their traffic by having their visitors mine for cryptocurrencies while on their site. The idea is that you are accessing content for free and in exchange, your computer its CPU in particular will be used for mining purposes. The Pirate B...
LaZagne v2.2 - Credentials Recovery Project
The LaZagne project is an open source application used to retrieve lots of passwords stored on a local computer. Each software stores its passwords using different techniques plaintext, APIs, custom algorithms, databases, etc.. This tool has been developed for the purpose of finding these passwor...
This Week in Security News
Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...
Expired domain names and malvertising
In Q1 and Q2 of 2017, we noticed a sharp decline in drive-by downloads coming from compromised websites. The campaigns of the past are either gone Pseudo Darkleech or have changed focus EITest using social engineering techniques. Malvertising - which has remained steady and is currently the main...
RIG exploit kit distributes Princess ransomware
We have identified a new drive-by download campaign that distributes the Princess ransomware AKA PrincessLocker, leveraging compromised websites and the RIG exploit kit. This is somewhat of a change for those tracking malvertising campaigns and their payloads. We had analyzed the PrincessLocker...
Design/Logic Flaw
Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...
CVE-2017-11158
CVE-2017-11158 affects Synology Cloud Station Drive on Windows (pre-4.2.5-4396). The issue is local DLL hijacking caused by untrusted search paths in the installer, enabling a local attacker to run arbitrary code by placing Trojan horses such as shfolder.dll, ntmarta.dll, secur32.dll, or dwmapi.d...
CVE-2017-11158
Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...
CVE-2017-11158: Uncontrolled Search Path Element
Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse 1 shfolder.dll, 2 ntmarta.dll, 3 secur32.dll or 4 dwmapi.dll file in th...
PT-2017-11783
Name of the Vulnerable Software and Affected Versions Synology Cloud Station Drive versions prior to 4.2.5-4396 Description The issue concerns untrusted search path vulnerabilities in the installer of Synology Cloud Station Drive on Windows. These vulnerabilities allow local attackers to execute...
UBUNTU-CVE-2017-12809
QEMU aka Quick Emulator, when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service NULL pointer dereference and QEMU process crash by flushing an empty CDROM device drive...
Intel Solid-State Drive Professional Denial of Service Vulnerability
Intel Solid-State Drive Professional is a solid-state drive from Intel Corporation USA. A security vulnerability exists in the firmware in Intel Solid-State Drive Professional PSF104P version and PSF109P version. A local attacker could exploit this vulnerability to cause a denial of service data...
2.x - Increasing the User Layer size for a Persistent Desktop
C drive of a 2.x desktop is running low on space...
Windows exploit techniques: from any directory you create to any file-read-vulnerability warning-the black bar safety net
One, Foreword In the past few months, I'm in meetings, introduced me to the“Windows logic privilege escalation guide”tips. Meeting length is only 2 hours, I would like to introduce many interesting techniques and tricks had to have been deleted. Over time, think in training courses complete about...
Nasty Mamba ransomware that encrypts entire hard drive resurfaces
By Waqas Mamba Ransomware Resurfaces in Brazil and Saudi Arabia With Nefarious This is a post from HackRead.com Read the original post: Nasty Mamba ransomware that encrypts entire hard drive resurfaces...
Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - us
Lenovo Security Advisory: LEN-15765 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3756 Summary Description: A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems. An attacker wi...
CVE-2017-5695
Data corruption vulnerability in firmware in Intel Solid-State Drive Consumer, Professional, Embedded, Data Center affected firmware versions LSBG200, LSF031C, LSF036C, LBF010C, LSBG100, LSF031C, LSF036C, LBF010C, LSF031P, LSF036P, LBF010P, LSF031P, LSF036P, LBF010P, LSMG200, LSF031E, LSF036E,...
Memory corruption
Data corruption vulnerability in firmware in Intel Solid-State Drive Professional PSF104P, PSF109P allows local users to cause a denial of service via unspecified vectors...
Memory corruption
Data corruption vulnerability in firmware in Intel Solid-State Drive Consumer, Professional, Embedded, Data Center affected firmware versions LSBG200, LSF031C, LSF036C, LBF010C, LSBG100, LSF031C, LSF036C, LBF010C, LSF031P, LSF036P, LBF010P, LSF031P, LSF036P, LBF010P, LSMG200, LSF031E, LSF036E,...