19100 matches found
Unveiling the Sea Turtle Cyber Espionage Campaign
Summary: Sea Turtle, a Turkey-based Advanced Persistent Threat APT actor, has been active since 2017. The group has primarily targeted European and Middle Eastern organizations, focusing on information theft and DNS hijacking to compromise repositories with valuable and sensitive data. In a recen...
Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware
A threat actor called Water Curupira has been observed actively distributing the PikaBot loader malware as part of spam campaigns in 2023. "PikaBot's operators ran phishing campaigns, targeting victims via its two components — a loader and a core module — which enabled unauthorized remote access...
Medium: c-ares
Issue Overview: A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Servers can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and...
Amazon Linux 2 : c-ares (ALAS-2024-2399)
The version of c-ares installed on the remote host is prior to 1.10.0-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2399 advisory. A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS Domain Name Serve...
PT-2024-1627 · Microsoft · Printer Metadata Troubleshooter Tool
Name of the Vulnerable Software and Affected Versions: Microsoft Printer Metadata Troubleshooter Tool versions prior to the January 5, 2024 update Description: The issue is related to insufficient input validation in the Microsoft Printer Metadata Troubleshooter Tool, which can allow an attacker ...
Security Bulletin: IBM Operational Decision Manager for December 2023 - Multiple CVEs addressed
Summary IBM Operational Decision Manager is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-37920...
Gom Player 2.3.92.5362 DLL Hijacking Vulnerability
Exploit Title: Gom Player 2.3.92.5362 - nvcuda.dll DLL Hijacking Exploit Author: Yehia Elghaly Mrvar0x Vendor Homepage: https://www.mrvar0x.com/ Version: 2.3.92.5362 Tested on: Windows 7, Windows 10 A DLL hijacking vulnerability has been discovered Gom Player 2.3.92.5362. When a user loads the...
Gom Player 2.3.92.5362 DLL Hijacking
Exploit Title: Gom Player 2.3.92.5362 - nvcuda.dll DLL Hijacking Date: 2023-01-03 Exploit Author: Yehia Elghaly Mrvar0x Vendor Homepage: https://www.mrvar0x.com/ Version: 2.3.92.5362 Tested on: Windows 7, Windows 10 A DLL hijacking vulnerability has been discovered Gom Player 2.3.92.5362. When a...
Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies
Telecommunication, media, internet service providers ISPs, information technology IT-service providers, and Kurdish websites in the Netherlands have been targeted as part of a new cyber espionage campaign undertaken by a Türkiye-nexus threat actor known as Sea Turtle. "The infrastructure of the...
CVE-2023-41782
There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code...
Code injection
There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code...
CVE-2023-41782 DLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI
There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code...
CVE-2023-41782 DLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI
There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code...
CVE-2023-41782
CVE-2023-41782 describes a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, where an attacker could place a fake DLL in a specific directory to execute malicious code. The provided documents do not specify affected versions, exact vulnerable components, root cause details, exploit vectors, or a c...
PT-2024-12972 · Zte · Zte Zxcloud Irai
Name of the Vulnerable Software and Affected Versions: ZTE ZXCLOUD iRAI affected versions not specified Description: The issue is related to a DLL hijacking vulnerability. An attacker could exploit this by placing a fake DLL file in a specific directory, allowing the execution of malicious code...
Mandiant's Twitter Account Restored After Six-Hour Crypto Scam Hack
American cybersecurity firm and Google Cloud subsidiary Mandiant had its X formerly Twitter account compromised for more than six hours by an unknown attacker to propagate a cryptocurrency scam. As of writing, the account has been restored on the social media platform. It's currently not clear ho...
CVE-2024-20807
Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information...
CVE-2024-20807
Implicit intent hijacking vulnerability in Samsung Email prior to version 6.1.90.16 allows local attacker to get sensitive information...