556 matches found
Falcon Terminal Security System V9.0 suffers from local elevation of privilege vulnerability
The business scope of Beijing Falcon Security Technology Co., Ltd. includes: technology promotion, technology development, technology service, technology consulting; sales of computers, software and auxiliary equipment, electronic products and so on. Falcon Terminal Security System V9.0 has a loc...
Major BEC Phishing Ring Cracked Open with 3 Arrests
Three men suspected of participating in a massive business email compromise BEC ring have been arrested in Lagos, Nigeria. A joint INTERPOL, Group-IB and Nigeria Police Force cybercrime investigation resulted in the arrest of the Nigerian nationals, believed to be responsible for distributing...
CVE-2020-12330
Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
Input validation
Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12330
Intel Falcon 8+ UAS AscTec Thermal Viewer (all versions) has a vulnerability with improper installer permissions allowing an authenticated local user to escalate privileges. This CVE-2020-12330 is described by Intel in INTEL-SA-00416 and corroborated by other sources; it indicates local access wi...
CVE-2020-12330
Improper permissions in the installer for the IntelR Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel® Falcon 8+ UAS AscTec Thermal Viewer Advisory
Summary: A potential security vulnerability in the Intel® Falcon 8+ UAS AscTec Thermal Viewer may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation Notice for the Intel® Falcon 8+ UAS AscTec Thermal...
CrowdStrike Falcon Sensor Installed (Windows)
Binary data crowdstrikefalconsensorwininstalled.nbin...
Other vulnerabilities in Ethernet smart contract FALCON 0x5AEf06eC39e98c05201ee1e54b653c372ECb9Cf3
FALCON is an ERC20 token on ethereum. The smart contract address is 0x5AEf06eC39e98c05201ee1e54b653c372ECb9Cf3, and its function Mining24 on line 102 can modify Owner and has no permission check, leading to an attacker being able to call the withdraw function line 274 to transfer all the ether in...
Stealth Falcon Targets Middle East with Windows BITS Feature
The notorious Stealth Falcon cyberespionage group has adopted a new backdoor using the Windows Background Intelligent Transfer Service BITS in its ongoing spyware attacks against journalists, activists and dissidents in the Middle East. According to researchers at ESET, attackers are exploiting t...
New Malware Uses Windows BITS Service to Stealthy Exfiltrate Data
Cybersecurity researchers have discovered a new computer virus associated with the Stealth Falcon state-sponsored cyber espionage group that abuses a built-in component of the Microsoft Windows operating system to stealthily exfiltrate stolen data to attacker-controlled server. Active since 2012,...
New Malware Uses Windows BITS Service to Stealthy Exfiltrate Data
Cybersecurity researchers have discovered a new computer virus associated with the Stealth Falcon state-sponsored cyber espionage group that abuses a built-in component of the Microsoft Windows operating system to stealthily exfiltrate stolen data to attacker-controlled server. Active since 2012,...
falconitservices.com XSS vulnerability
Vulnerable URL: https://www.falconitservices.com/SitePages/Home.aspx?FollowSite=0=%27-confirm%22OPENBUGBOUNTY%22-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3459359 VIP...
XML External Entity Injection And Information Disclosure
Falcon is vulnerable to XML external entity injection and information disclosure. It is possible to inject an external entity during XML entity parsing, and leak the location of the credential files in log messages during the data source entity parsing...
Automated Security Response: Falcon Orchestrator
CrowdStrike Falcon Orchestrator is an extendable Windows-based application that provides workflow automation, case management and security response functionality. The tool leverages the highly extensible APIs contained within the CrowdStrike Falcon Connect program. Falcon Orchestrator has only be...
Westermo WeOS Detection (SNMP)
SNMP based detection of Westermo WeOS devices like e.g. Westermo Falcon, Westermo Lynx or Westermo RedFox. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Code injection
The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2016-1177
The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2016-1177
The CVE-2016-1177 entry concerns Falcon WisePoint and WisePoint Authenticator, where the management screen is vulnerable to clickjacking. Concrete details from connected sources show that WisePoint 4.3.1 and earlier, and WisePoint Authenticator 4.1.19.22 and earlier are affected. The root cause i...
