Ukrainian Sailors Are Using Telegram to Avoid Being Tricked Into Smuggling Oil for Russia

Contract seafarers in Ukraine are turning to online whisper networks to keep themselves from being hired into Russia’s sanctions-busting shadow fleet...

New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malware

An updated version of an information-stealing malware called Rhadamanthys is being used in phishing campaigns targeting the oil and gas sector. "The phishing emails use a unique vehicle incident lure and, in later stages of the infection chain, spoof the Federal Bureau of Transportation in a PDF...

Threat landscape for industrial automation systems. H2 2023

Global statistics across all threats In the second half of 2023, the percentage of ICS computers on which malicious objects were blocked decreased by 2.1 pp to 31.9%. Percentage of ICS computers on which malicious objects were blocked, by half year Selected industries In H2 2023, building...

Savvy Seahorse Using Fake ChatGPT, Facebook Ads in DNS Investment Scam

By Deeba Ahmed The scammers creates fake investment platforms using popular companies like Tesla, Meta, and Imperial Oil and lures unsuspecting users into depositing funds. This is a post from HackRead.com Read the original post: Savvy Seahorse Using Fake ChatGPT, Facebook Ads in DNS Investment S...

orieloil.ie Improper Access Control vulnerability OBB-3835304

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

devcooilandgas.com Improper Access Control vulnerability OBB-3797245

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

x-oil-webshop.de Cross Site Scripting vulnerability OBB-3748482

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection.This issue affects Oil Management Software: before 20230912...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CVE-2023-4835

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection.This issue affects Oil Management Software: before 20230912...

CVE-2023-4835 SQLi in CF's Oil Management Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CVE-2023-4835

CVE-2023-4835 describes an SQL Injection in CF Software Oil Management Software, caused by improper neutralization of special elements in SQL commands. Affected: Oil Management Software versions prior to 20230912. Impact is SQL injection; no exploitation details are provided in the documents. Mit...

CVE-2023-4835 SQLi in CF's Oil Management Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management Software: before 20230912...

CF Software Oil Management Software SQL Injection Vulnerability

CF Software Oil Management Software is an oil management software from CF Software. A SQL injection vulnerability exists in versions of CF Software Oil Management Software prior to 20230912, which stems from improper neutralization of special elements...

Dover Fueling Solutions MAGLINK LX Console Path Traversal Vulnerability

The Dover Fueling Solutions MAGLINK LX Console is Dover Fueling Solutions' integrated console for fuel stations and oil distribution. This console is designed to help manage various operations at fuel stations, including refueling, payment, data monitoring, and oil management. A path traversal...

Dover Fueling Solutions MAGLINK LX Console Security Vulnerability

The Dover Fueling Solutions MAGLINK LX Console is Dover Fueling Solutions' integrated console for fuel stations and oil distribution. This console is designed to help manage various operations at fuel stations, including refueling, payment, data monitoring, and oil management. A security...

Friday Squid Blogging: 2023 Squid Oil Global Market Report

I had no idea that squid contain sufficient oil to be worth extracting. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Malicious USB Drives Targeting Global Targets with SOGU and SNOWYDRIVE Malware

Cyber attacks using infected USB infection drives as an initial access vector have witnessed a three-fold increase in the first half of 2023, That's according to new findings from Mandiant, which detailed two such campaigns – SOGU and SNOWYDRIVE – targeting both public and private sector entities...

CVE-2023-36922

Due to programming error in function module and report, IS-OIL component in SAP ECC and SAP S/4HANA allows an authenticated attacker to inject an arbitrary operating system command into an unprotected parameter in a common default extension. On successful exploitation, the attacker can read or...