Active-Directory-Exploitation-Cheat-Sheet

This is a cheat sheet for Windows Active Directory exploitation, containing common enumeration and attack methods. The repository is a collection of PowerShell scripts and modules that can be used to perform various attacks on Active Directory, including domain enumeration, lateral movement, and...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in several components of Windows. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Obtaining elevated privileges Execution of arbitrary code Accessing sensitive data The...

5 Themes for Product Security and Fostering Organizational Growth

In this article we would like to review what Raj Umadas, Product Security Manager at Compass, has shared during our recent webinar highlighting recurring themes that have led to impactful collaborations and organizational risk reduction. Product security ProdSec is crucial in the process of growi...

Best Practices to Thwart Business Email Compromise (BEC) Attacks

Business email compromise BEC refers to all types of email attacks that do not have payloads. Although there are numerous types, there are essentially two main mechanisms through which attackers penetrate organizations utilizing BEC techniques, spoofing and account take-over attacks. In a recent...

Directory Traversal Vulnerability in Yulin Golden Point Cloud Software Technology Co.

Yulin Golden Point Cloud Software Technology Co., Ltd, business scope: artificial intelligence application software development; network and information security software development; software sales; information security equipment sales; network equipment sales; electronic product sales and so on...

Information Leakage Vulnerability in Jinpan Software's Refined Management Platform

Beijing Jinpan Pengtu Software Technology Co., Ltd. was founded in 1995, is specializing in library information automation product development, promotion and application and system maintenance of high-tech enterprises. There is an information leakage vulnerability in Jinpan Software Refinement...

Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System

Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. A command execution vulnerability exists in the Zhongxin Golden Shield information security management system, which can be exploited by an attacker to...

Weak Password Vulnerability in VD-130Ae Camera at Golden Brick Communication Technology Co.

Brickcom Corporation Brickcom is composed of R&D team with rich experience in surveillance industry, and develops digital surveillance products with advanced technology. Including Mega IP Camera, Wireless IP Camera, Video Server, 3G Video Transmission NVR Embedded Network DVR, CMS Client Platform...

SQL Injection Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Network Information Security Co., Ltd. is a high-tech company integrating network security products, software and hardware development. There is a SQL injection vulnerability in the Zhongxin Golden Shield information security management system, which can be exploited by attackers to obta...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield information security management system realizes the collection, monitoring, analysis, early warning and control of all kinds of resource information such as network traffic, IP address, domain name, information content, application and so on in the IDC server room. Weak...

Hackers Targeting professionals With 'more_eggs' Malware via LinkedIn Job Offers

A new spear-phishing campaign is targeting professionals on LinkedIn with weaponized job offers in an attempt to infect targets with a sophisticated backdoor trojan called "moreeggs." To increase the odds of success, the phishing lures take advantage of malicious ZIP archive files that have the...

LinkedIn Spear-Phishing Campaign Targets Job Hunters

A threat group called Golden Chickens is delivering the fileless backdoor moreeggs through a spear-phishing campaign targeting professionals on LinkedIn with fake job offers, according to researchers at eSentire. The phishing emails try to trick a victim into clicking on a malicious .ZIP file by...

SQL Injection Vulnerability in Intelligent Waste Sorting Management System

Tongling Golden Age Technology Limited Liability Company is a combination of the Internet of Things, information technology, waste classification and treatment of enterprises. An SQL injection vulnerability exists in the Intelligent Garbage Classification Management System, which can be exploited...

Web vulnerabilities exploit weekly digest #1. March 8-15th 2021. VMware vCenter and Apache OFBiz RCE.

Welcome to the Wallarm weekly web exploits digest! Since this week, we will publish our weekly digests consists of web exploits with CVSS scores higher than 5. It will be followed by explanations, risks analysis, related stories and news. So, here we go! The most sophisticated and interesting...

Weak Password Vulnerability in Zhongxin Golden Shield Information Security Management System

Zhongxin Golden Shield Information Security Management System adopts distributed data collection, intelligent packet reorganization and flow reorganization, adaptive in-depth protocol analysis, real-time network protocol blocking, massive data storage, in-depth data mining and other advanced...

Golden FTP Server 4.70 Buffer Overflow

Golden FTP Server 4.70 - 'PASS' Buffer Overflow 2 Author: 1F98D Original Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on Windows 10 x64 A buffer overflow exists in GoldenFTP during the authentication process. Note that the source ip address of the user performing the...

Golden FTP Server 4.70 - 'PASS' Buffer Overflow (2)

Golden FTP Server 4.70 - 'PASS' Buffer Overflow 2 Author: 1F98D Original Authors: Craig Freyman cd1zz and Gerardo Iglesias Galvan iglesiasgg Tested on Windows 10 x64 A buffer overflow exists in GoldenFTP during the authentication process. Note that the source ip address of the user performing the...

SVR Attacks on Microsoft 365

FireEye is reporting the current known tactics that the SVR used to compromise Microsoft 365 cloud data as part of its SolarWinds operation: Mandiant has observed UNC2452 and other threat actors moving laterally to the Microsoft 365 cloud using a combination of four primary techniques: Steal the...

Command Execution Vulnerability in Huaan Securities Qianlong Golden Edition

Qianlong Golden Edition is a market analysis system, including online trading system, new support for the delayed trading of treasury bonds reverse repo. Huaan Securities Qianlong Golden Edition has a command execution vulnerability that can be exploited by an attacker to inject an executable DLL...