1921 matches found
CVE-2023-36019
creationtimestamp| type| source ---|---|--- 2023-12-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1182 2023-12-13 11:20:55+00:00| seen| https://t.me/truesecator/5194 2026-07-26 07:00:40+00:00| seen| https://t.me/EchelonEyes/2269 2026-07-27 00:00:54+00:00| seen|...
OpenCart Authorization Issues Vulnerability (CNVD-2024-30067)
OpenCart is an open source e-commerce system from the OpenCart team in Hong Kong, China. The system provides product reviews, product ratings, product additions and other modules. OpenCart suffers from an authorization issue vulnerability that arises from allowing a back-end user with...
CVE-2023-36413
creationtimestamp| type| source ---|---|--- 2023-11-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1160 2023-11-15 12:34:59+00:00| seen| https://t.me/truesecator/5085 2023-11-17 08:13:29+00:00| exploited| https://t.me/hackyourmom/5983 2026-07-26 02:02:18+00:00| seen|...
CVE-2023-46510
CVE-2023-46510 affects ZIONCOM (Hong Kong) Technology Limited A7000R 4.1cu.4154 . The vulnerability occurs in the endpoint cig-bin/cstecgi.cgi via the function setPasswordCfg , enabling an attacker to execute arbitrary code. The CVE’s provided metrics indicate a network-exposed, low-privilege, us...
Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware
The popularity of Brazil's PIX instant payment system has made it a lucrative target for threat actors looking to generate illicit profits using a new malware called GoPIX. Kaspersky, which has been tracking the active campaign since December 2022, said the attacks are pulled off using malicious...
Hong Kong residents targeted in malvertising campaigns for WhatsApp, Telegram
Malvertising is a powerful malware or scam delivery mechanism that makes it easy to target specific geographies or even users. A recent article from the South China Morning Post discussed an increase in malicious webpages for the popular WhatsApp communication tool, driven via malicious Google ad...
CVE-2023-40299
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...
CVE-2023-40299
CVE-2023-40299 affects Kong Insomnia 2023.4.0 on macOS. The root cause is the use of the DYLD_INSERT_LIBRARIES environment variable, which can be manipulated to execute code and access restricted files, or trigger TCC permission requests. The exploit is described as a local attack with low attack...
CVE-2023-40299: Process Control
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...
PT-2023-27366 · Kong · Kong Insomnia
Name of the Vulnerable Software and Affected Versions: Kong Insomnia version 2023.4.0 Description: The issue allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD INSERT LIBRARIES environment variable. This can be exploited on macOS...
CVE-2023-40299
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...
CVE-2023-40299
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...
CVE-2023-40299
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLDINSERTLIBRARIES environment variable...
Mastering API Security: Learn the 3 Key Principles at Kong API Summit 2023
In an era where APIs Application Programming Interfaces are the lifeblood of digital interactions, the need for robust API security has never been more critical. According to Gartner research, a staggering 90% of web-enabled applications are predicted to harbor vulnerabilities related to APIs. To...
How to Secure All Your APIs Through Multiple Deployment Options
Imperva has invested in strengthening our API Security offering to meet the needs of customers since the acquisition of CloudVector in 2021. Since then, the product’s capabilities have expanded, positioning it as a leader in the growing API Security market. What makes Imperva API Security unique ...
Carderbee APT Strikes Hong Kong with Supply Chain Attack
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Carderbee advanced persistent threat APT group executed a supply chain attack by exploiting the legitimate Cobra DocGuard software. Their objective was to deploy the PlugX backdoor onto targeted...
Carderbee Attacks: Hong Kong Organizations Targeted via Malicious Software Updates
A previously undocumented threat cluster has been linked to a software supply chain attack targeting organizations primarily located in Hong Kong and other regions in Asia. The Symantec Threat Hunter Team, part of Broadcom, is tracking the activity under its insect-themed moniker Carderbee. The...
New Supply Chain Attack Hit Close to 100 Victims—and Clues Point to China
The hackers, who mostly targeted victims in Hong Kong, also hijacked Microsoft’s trust model to make their malware harder to detect...