SUSE SLED15: libruby2_5-2_5 / ruby2.5 / ruby2.5-devel / ruby2.5-devel-extra / etc (SUSE-SU-2022:3292-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3292-1 advisory. - CVE-2021-41819: Fixed cookie prefix spoofing in CGI::Cookie.parse bsc1193081. Tenable has extracted the...

CISA Releases Eleven Industrial Control Systems Advisories

CISA has released eleven 11 Industrial Control Systems ICS advisories on September 15, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisori...

SuiteCRM authenticated SQL injection in export functionality

This module exploits an authenticated SQL injection in SuiteCRM in versions before 7.12.6. The vulnerability allows an authenticated attacker to send specially crafted requests to the export entry point of the application in order to retrieve all the usernames and their associated password from t...

CVE-2022-35413

creationtimestamp| type| source ---|---|--- 2022-09-14 02:25:57+00:00| seen| https://t.me/cibsecurity/49750 2024-01-15 10:01:13+00:00| seen| https://t.me/arpsyndicate/2777 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-03...

Ubuntu 22.04 LTS : .NET 6 vulnerability (USN-5609-1)

The remote Ubuntu 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5609-1 advisory. Graham Esau discovered that .NET 6 incorrectly parsed certain payloads during model binding. An attacker could possibly use this issue to cause a denial of servic...

CVE-2022-27593

creationtimestamp| type| source ---|---|--- 2022-09-12 15:41:46+00:00| exploited| https://t.me/ctinow/63043 2022-09-12 17:30:13+00:00| seen| https://t.me/cibsecurity/49451 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 11:52:27+00:00| seen|...

SUSE SLES12 Security Update : clamav (SUSE-SU-2022:3139-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3139-1 advisory. clamav was updated to 0.103.7 bsc1202986 Upgrade the vendored UnRAR library to version 6.1.7. Fix logical signature 'Intermediates' feature...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on September 08, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

Profiling DEV-0270: PHOSPHORUS’ ransomware operations

Microsoft threat intelligence teams have been tracking multiple ransomware campaigns and have tied these attacks to DEV-0270, also known as Nemesis Kitten, a sub-group of Iranian actor PHOSPHORUS. Microsoft assesses with moderate confidence that DEV-0270 conducts malicious network operations,...

Mirai Variant MooBot Botnet Exploiting D-Link Router Vulnerabilities

A variant of the Mirai botnet known as MooBot is co-opting vulnerable D-Link devices into an army of denial-of-service bots by taking advantage of multiple exploits. "If the devices are compromised, they will be fully controlled by attackers, who could utilize those devices to conduct further...

Debian dla-3100 : libgoogle-gson-java - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3100 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3100-1 [email protected] https://www.debian.org/lts/security/...

Worok Hackers Target High-Profile Asian Companies and Governments

High-profile companies and local governments located primarily in Asia are the subjects of targeted attacks by a previously undocumented espionage group dubbed Worok that has been active since late 2020. "Worok's toolset includes a C++ loader CLRLoad, a PowerShell backdoor PowHeartBeat, and a C...

CISA Releases Five Industrial Control Systems Advisories

CISA has released five Industrial Control Systems ICS advisories on September 06, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories fo...

CVE-2022-2376

creationtimestamp| type| source ---|---|--- 2022-09-05 16:12:11+00:00| seen| https://t.me/cibsecurity/49285 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-28 00:00:00+00:00| exploited| The Shadowserver...

Ransomware Attackers Abuse Genshin Impact Anti-Cheat System to Disable Antivirus

A vulnerable anti-cheat driver for the Genshin Impact video game has been leveraged by a cybercrime actor to disable antivirus programs to facilitate the deployment of ransomware, according to findings from Trend Micro. The ransomware infection, which was triggered in the last week of July 2022,...

European Spyware Vendor Offering Android and iOS Device Exploits

By Deeba Ahmed The proposal documents were leaked on a Russian hacking forum showing Intellexa is offering remote data extraction from Android and iOS devices in exchange for $8 million. This is a post from HackRead.com Read the original post: European Spyware Vendor Offering Android and iOS Devi...

CISA releases two Industrial Control Systems Advisories

CISA has released two Industrial Control Systems ICS advisories on September 01, 2022. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

RHEL 8 : kernel (RHSA-2022:6243)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6243 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: information leak in scsiioctl...

CISA Releases 12 Industrial Control Systems Advisories

CISA has released 12 Industrial Control Systems ICS advisories on August 30, 2022. These advisories provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

Slackware Linux 15.0 / current vim Multiple Vulnerabilities (SSA:2022-237-01)

The version of vim installed on the remote host is prior to 9.0.0270. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-237-01 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. CVE-2022-2923 - Use After Free in GitHub repositor...