5068 matches found
Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment
Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...
Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment
Phorpiex, an enduring botnet known for extortion campaigns and for using old-fashioned worms that spread via removable USB drives and instant messaging apps, began diversifying its infrastructure in recent years to become more resilient and to deliver more dangerous payloads. Today, the Phorphiex...
Fuzzing iOS code on macOS at native speed
Or how iOS apps on macOS work under the hood Posted by Samuel Groß, Project Zero This short post explains how code compiled for iOS can be run natively on Apple Silicon Macs. With the introduction of Apple Silicon Macs, Apple also made it possible to run iOS apps natively on these Macs. This is...
The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code in the user’s browser.
The vulnerability of the Adobe Connect instant messaging program relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...
The vulnerability in the web interface of the programmatically defined Cisco SD-WAN messaging service allows a perpetrator to bypass authentication and alter the configuration of the target system.
The vulnerability of the Cisco SD-WAN program-defined messaging web interface is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass authentication and alter the configuration of the target system by sending specially crafted HTTP requests...
The vulnerability of the programmatically defined Cisco SD-WAN messaging service allows a hacker to create new administrative-level user accounts.
The vulnerability of the programmatically defined Cisco SD-WAN messaging service is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to create new administrative user accounts remotely...
The vulnerability of the Adobe Connect instant messaging program, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the Adobe Connect instant messaging program is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the administrator account’s context...
The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code in the user’s browser.
The vulnerability of Adobe Connect’s instant messaging service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...
The vulnerability of Adobe Connect’s instant messaging program, related to the lack of protective measures for the website structure, allows a hacker to execute arbitrary JavaScript code in the user’s browser.
The vulnerability of Adobe Connect’s instant messaging service is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser remotely...
The vulnerability of the messaging service provided by the microprogramming software for Cisco RV340, RV340W, RV345, and RV345P allows a hacker to execute arbitrary commands with root privileges.
The vulnerability of the message exchange service provided by the microprogramming software for Cisco RV340, RV340W, RV345, and RV345P routers is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary comman...
The vulnerability in the web interface of the BroadWorks Messaging Server allows a perpetrator to gain unauthorized access to protected information or cause service failures.
The vulnerability in the web interface of the BroadWorks Messaging Server is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information or cause service...
WhatsApp’s New Privacy Policy Just Kicked In
Instead of a hard cutoff, the messaging app will gradually degrade and eventually cease to function if you don’t accept the changes...
WhatsApp calls and messages will break unless you share data with Facebook
WhatsApp told users last week that there was no need for alarm regarding an upcoming privacy policy deadline, as users who refuse to accept the privacy policy will not have their accounts deleted—they will just have their apps rendered useless, eventually incapable of receiving calls and messages...
Exim Permission License and Access Control Issues Vulnerability
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a privilege-granting and access-control issue vulnerability that stems from the application not properly applying security restrictions to a fake offline directory. An...
Exim Backlink Vulnerability
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a security vulnerability that exists as a result of the following issue with symbolic links in the Exim log directory. An attacker can exploit the vulnerability to overwri...
Exim Resource Management Error Vulnerability
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a Resource Management Error vulnerability that stems from improper resource management within the application. An attacker could exploit this vulnerability to cause a deni...
Exim Security Feature Issue Vulnerability
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a security signature issue vulnerability that stems from the lack of a closed execution flag for privileged pipelines. No detailed vulnerability details are provided at th...
Prosodical Thoughts Prosody 授权问题漏洞
Prosodical Thoughts Prosody is a Prosodical Thoughts open source application . A modern XMPP communication server. A security vulnerability exists in Prosody prior to version 0.11.9. A remote attacker could exploit the vulnerability to use the server's bandwidth indefinitely...
CVE-2021-29471
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 "Push rules" can specify conditions under which they will match, including eventmatch, which matches event...
CVE-2021-29471 Denial of service in Matrix Synapse
Synapse is a Matrix reference homeserver written in python pypi package matrix-synapse. Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.33.2 "Push rules" can specify conditions under which they will match, including eventmatch, which matches event...