Dormant Colors browser hijackers could be used for more nefarious tasks, report says

Researchers from Guardio, a cybersecurity company specializing in web browser protection, recently revealed a campaign involving a trove of popular yet malicious extensions programmed to steal user searches, browsing data, and affiliation to thousands of targeted sites. Nicknamed "Dormant Colors,...

KLA20019 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. Use...

Google Chrome Security Bypass Vulnerability (CNVD-2022-85089)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from insufficient data validation in Extensions. An attacker could use this vulnerability to bypass security restrictions...

Google Chrome Extensions Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security vulnerability that is caused due to free after use in Extensions. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service on a system...

Microsoft Edge (Chromium) < 107.0.1418.24 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.24. It is, therefore, affected by multiple vulnerabilities as referenced in the October 27, 2022 advisory. - Type Confusion in V8. CVE-2022-3652 - Heap buffer overflow in Vulkan. CVE-2022-3653 - Use after fr...

Chrome Extensions Harboring Dormant Colors Malware Infect Over a Million PCs

By Waqas Among other capabilities, Dormant Colors malware can also inject ads into standard pages and append affiliate links to e-commerce websites to generate affiliate revenue. This is a post from HackRead.com Read the original post: Chrome Extensions Harboring Dormant Colors Malware Infect Ove...

Path Traversal – Reading Certain File Extensions

BigBlueButton 2.5.6 is vulnerable to a path traversal vulnerability, that allows an attacker with a valid starting folder path, to traverse and read other files without authentication, assuming the files have certain extensions txt, swf, svg, png. PoC: 1- Submit a request to...

Vice Society Hackers Are Behind Several Ransomware Attacks Against Education Sector

A cybercrime group known as Vice Society has been linked to multiple ransomware strains in its malicious campaigns aimed at the education, government, and retail sectors. The Microsoft Security Threat Intelligence team, which is tracking the threat cluster under the moniker DEV-0832, said the gro...

PT-2022-5334

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 107.0.5304.62 Microsoft Edge affected versions not specified Description The issue is related to insufficient data validation in extensions, which could allow a remote attacker who has compromised the renderer...

Google Chrome: Input validation error vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from insufficient data validation in Extensions. An attacker could use this vulnerability to bypass security restrictions...

Mitel MiCollab security vulnerabilities

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. A security vulnerability exists in Mitel MiCollab versions 9.1.3 through 9.5.0.101, which stems from an incorrect authorization control in the...

org.jenkins-ci.plugins.workflow:workflow-cps (>=2.40, <=2.41), org.jenkins-ci.plugins:claim (>=2.10, <=2.15) +3 more potentially affected by CVE-2022-43401 +3 more via org.jenkins-ci.plugins:script-security (1.34)

org.jenkins-ci.plugins:script-security MAVEN version 1.34 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:script-security and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-cps =2.40, =2.10, =1.7, =1.2.5, =1.2.5,...

org.jenkins-ci.plugins:pipeline-graph-analysis (>=1.7, <=1.9), org.jenkinsci.plugins:pipeline-model-definition (>=1.2.5, <=1.2.7) +1 more potentially affected by CVE-2022-43401 +3 more via org.jenkins-ci.plugins.workflow:workflow-cps (2.41)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:pipeline-graph-analysis =1.7, =1.2.5, =1.2.5,...

org.jenkinsci.plugins:pipeline-model-definition (>=1.1.5, <=1.2-beta-3), org.jenkinsci.plugins:pipeline-model-extensions (>=1.1.5, <=1.2-beta-3) potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (2.33)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.1.5, =1.1.5,...

org.jenkinsci.plugins:pipeline-model-definition (>=1.1.5, <=1.2-beta-3), org.jenkinsci.plugins:pipeline-model-extensions (>=1.1.5, <=1.2-beta-3) potentially affected by CVE-2022-43401 +3 more via org.jenkins-ci.plugins.workflow:workflow-cps (2.33)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.1.5, =1.1.5,...

org.jenkinsci.plugins:pipeline-model-definition (>=1.1.5, <=1.2-beta-3), org.jenkinsci.plugins:pipeline-model-extensions (>=1.1.5, <=1.2-beta-3) potentially affected by CVE-2022-43401 +3 more via org.jenkins-ci.plugins.workflow:workflow-cps (2.33)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkinsci.plugins:pipeline-model-definition =1.1.5, =1.1.5,...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0), org.jenkins-ci.plugins:xcode-plugin (>=2.0.13, <=2.0.15) +2 more potentially affected by CVE-2022-43401 +3 more via org.jenkins-ci.plugins.workflow:workflow-cps (2.36.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0.13, =1.2-beta-4,...

org.jenkins-ci.plugins:pipeline-graph-analysis (>=1.7, <=1.9), org.jenkinsci.plugins:pipeline-model-definition (>=1.2.5, <=1.2.7) +1 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (2.41)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.41 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:pipeline-graph-analysis =1.7, =1.2.5, =1.2.5,...

org.jenkins-ci.plugins:github-autostatus (>=1.0, <=2.0), org.jenkins-ci.plugins:xcode-plugin (>=2.0.13, <=2.0.15) +2 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (2.36.1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 2.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins:github-autostatus =1.0, =2.0.13, =1.2-beta-4,...

Improving privacy when browsing web: Alternative browsers and chrome extensions

By Waqas As the internet expands and new technological developments occur, we must look back at what matters most: our… This is a post from HackRead.com Read the original post: Improving privacy when browsing web: Alternative browsers and chrome extensions...