FICORA and Kaiten Botnets Exploit Old D-Link Vulnerabilities for Global Attacks

Cybersecurity researchers are warning about a spike in malicious activity that involves roping vulnerable D-Link routers into two different botnets, a Mirai variant dubbed FICORA and a Kaiten aka Tsunami variant called CAPSAICIN. "These botnets are frequently spread through documented D-Link...

CVE-2024-12902 Global Wisdom Software ANCHOR - Undocumented Privileged Account

ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default...

CVE-2024-12902

The CVE covers Global Wisdom Software ANCHOR running on a Windows VM, where default passwords on high-privilege Windows service accounts could let an attacker remotely log in to the VM. Public documents confirm the vulnerability vector as remote access via default credentials, driven by OS-level ...

CVE-2024-12902 Global Wisdom Software ANCHOR - Undocumented Privileged Account

ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default...

Global Wisdom ANCHOR 安全漏洞

Global Wisdom ANCHOR is an integrated product from Global Wisdom, Inc. that runs on Windows virtual machines. A security vulnerability exists in Global Wisdom ANCHOR that originates from the underlying Windows operating system that contains highly privileged service accounts. These accounts use...

PT-2024-17790 · Global Wisdom +1 · Anchor +1

Name of the Vulnerable Software and Affected Versions: ANCHOR from Global Wisdom Software affected versions not specified Description: The underlying Windows OS of the ANCHOR product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in...

LockBit Developer Rostislav Panev Charged for Billions in Global Ransomware Damages

A dual Russian and Israeli national has been charged in the United States for allegedly being the developer of the now-defunct LockBit ransomware-as-a-service RaaS operation since its inception in or around 2019 through at least February 2024. Rostislav Panev , 51, was arrested in Israel earlier...

Arbitrary Code Execution (ACE)

pnpm is vulnerable to Arbitrary Code Execution ACE. The vulnerability is due to mishandling of overrides and global cache, where overrides from one workspace leak into npm metadata saved in global cache, affecting other workspaces, and installs fail to revalidate data, allows an attacker to execu...

The vulnerability of the Global Search technology implemented by Microsoft Defender for Endpoint on the Microsoft Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Defender for Endpoint operating system’s Global Search technology is related to deficiencies in the indexing mechanism. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

OSV-2023-1402 Global-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=384343083 Crash type: Global-buffer-overflow READ Crash state: std::1::basicstring, std::1::allocatorch XYWriteParser::createTable XYWriteParser::parseTextZone...

As the Mastermind of Far-Right ‘Active Clubs’ Goes to Prison, His Violent Movement Goes Global

The white supremacist Robert Rundo faces years in prison. But the “Active Club” network he helped create has proliferated in countries around the world, from Eastern Europe to South America...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50128)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50128 advisory. - In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in...

GO-2024-3325 kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp

kcp's impersonation allows access to global administrative groups in github.com/kcp-dev/kcp...

Microsoft Windows Defender 安全漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from the American company Microsoft. Microsoft Windows Defender suffers from an authorization issue vulnerability that arises from improper authorization of an index containing sensitive information in a...

PT-2024-9628 · Microsoft · Windows Defender

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to improper authorization of an index containing sensitive information from a Global Files search in Windows Defender, allowing an authorized attacker to...

PT-2024-36034 · Unknown · Ddr Module

Name of the Vulnerable Software and Affected Versions: DDR module affected versions not specified Description: The issue is related to a race condition vulnerability in the DDR module. Successful exploitation of this vulnerability may affect service confidentiality. There is no information provid...

kcp's impersonation allows access to global administrative groups

Impact Impersonation is a feature of the Kubernetes API, allowing to override user information. As downstream project, kcp inherits this feature. As per the linked documentation a specific level of privilege usually assigned to cluster admins is required for impersonation. The vulnerability in kc...

GHSA-C7XH-GJV4-4JGV kcp's impersonation allows access to global administrative groups

Impact Impersonation is a feature of the Kubernetes API, allowing to override user information. As downstream project, kcp inherits this feature. As per the linked documentation a specific level of privilege usually assigned to cluster admins is required for impersonation. The vulnerability in kc...

GHSA-VM32-9RQF-RH3R pnpm no-script global cache poisoning via overrides / `ignore-scripts` evasion

Summary pnpm seems to mishandle overrides and global cache: 1. Overrides from one workspace leak into npm metadata saved in global cache 2. npm metadata from global cache affects other workspaces 3. installs by default don't revalidate the data including on first lockfile generation This can make...

pnpm no-script global cache poisoning via overrides / `ignore-scripts` evasion

Summary pnpm seems to mishandle overrides and global cache: 1. Overrides from one workspace leak into npm metadata saved in global cache 2. npm metadata from global cache affects other workspaces 3. installs by default don't revalidate the data including on first lockfile generation This can make...