Lucene search
+L

223 matches found

Krebs on Security
Krebs on Security
added 2024/01/30 7:07 p.m.27 views

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

On Jan. 9, 2024, U.S. authorities arrested a 19-year-old Florida man charged with wire fraud, aggravated identity theft, and conspiring with others to use SIM-swapping to steal cryptocurrency. Sources close to the investigation tell KrebsOnSecurity the accused was a key member of a criminal hacki...

7.3AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/03/24 12:00 a.m.19 views

The vulnerability of the cross-platform media center Plex Media Server, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the cross-platform media server Plex Media Server lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.9AI score0.72936EPSS
SaveExploits4References4Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2023/03/10 12:00 a.m.94 views

Plex Media Server Remote Code Execution Vulnerability

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it...

7.2CVSS5.7AI score0.72936EPSS
SaveIn wildExploits4
The Hacker News
The Hacker News
added 2023/03/07 6:21 a.m.4 views

LastPass Hack: Engineer's Failure to Update Plex Software Led to Massive Data Breach

The massive breach at LastPass was the result of one of its engineers failing to update Plex on their home computer, in what's a sobering reminder of the dangers of failing to keep software up-to-date. The embattled password management service last week revealed how unidentified actors leveraged...

7.2CVSS7.8AI score0.72936EPSS
SaveExploits4
The Hacker News
The Hacker News
added 2023/03/07 6:21 a.m.110 views

LastPass Hack: Engineer's Failure to Update Plex Software Led to Massive Data Breach

The massive breach at LastPass was the result of one of its engineers failing to update Plex on their home computer, in what's a sobering reminder of the dangers of failing to keep software up-to-date. The embattled password management service last week revealed how unidentified actors leveraged...

7.2CVSS1.7AI score0.72936EPSS
SaveExploits4
VulnCheck KEV
VulnCheck KEV
added 2023/02/27 12:00 a.m.6 views

VulnCheck KEV: CVE-2020-5741

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it...

7.2CVSS7.8AI score0.72936EPSS
SaveExploits4References1
Tenable Nessus
Tenable Nessus
added 2023/01/30 12:00 a.m.29 views

FreeBSD : Plex Media Server -- security vulnerability (98f78c7a-a08e-11ed-946e-002b67dfc673)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 98f78c7a-a08e-11ed-946e-002b67dfc673 advisory. - An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker with a footho...

7CVSS7.3AI score0.01176EPSS
SaveExploits1References3
OpenVAS
OpenVAS
added 2023/01/19 12:00 a.m.24 views

Plex Media Server < 1.21.3.4014 DoS Vulnerability

Plex Media Server is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.5CVSS7.5AI score0.15035EPSS
SaveExploits1References1
OSV
OSV
added 2023/01/18 2:15 p.m.9 views

CVE-2021-33959

Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service...

7.5CVSS5.8AI score0.15035EPSS
SaveExploits1References2
NVD
NVD
added 2023/01/18 2:15 p.m.41 views

CVE-2021-33959

Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service...

7.5CVSS7.5AI score0.15035EPSS
SaveExploits1References2
Prion
Prion
added 2023/01/18 2:15 p.m.26 views

Design/Logic Flaw

Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service...

5CVSS7.5AI score0.15035EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2023/01/18 12:00 a.m.44 views

CVE-2021-33959

Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service...

7.7AI score0.15035EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/01/18 12:00 a.m.7 views

CVE-2021-33959

Plex media server 1.21 and before is vulnerable to ddos reflection attack via plex service...

7.7AI score0.15035EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/01/18 12:00 a.m.11 views

Plex media server 访问控制错误漏洞

Plex media server is a media player from Plex. An access control error vulnerability exists in Plex media server version 1.21 and prior versions, which can be exploited in a distributed denial of service attack via the plex service...

7.5CVSS7.3AI score0.15035EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/01/18 12:00 a.m.12 views

PT-2023-12231

Name of the Vulnerable Software and Affected Versions Plex media server versions 1.21 and earlier Description The issue concerns a ddos reflection attack that can be launched via the plex service. Recommendations For Plex media server versions 1.21 and earlier, update to a version later than 1.21...

7.5CVSS7.5AI score0.15035EPSS
SaveExploits1References6
CVE
CVE
added 2023/01/18 12:00 a.m.686 views

CVE-2021-33959

Summary: Multiple sources report a DoS/reflection vulnerability in Plex Media Server affecting version 1.21 and earlier (with OpenVAS citing &lt;1.21.3.4014). The Red Hat and CNNVD entries align on “Plex media server … ddos reflection attack via plex service.” The issue is described as an access-...

7.5CVSS7.5AI score0.15035EPSS
SaveExploits1References2Affected Software1
Malwarebytes
Malwarebytes
added 2022/08/29 10:00 a.m.35 views

A week in security (August 22 - August 28)

Last week on Malwarebytes Labs: Cryptojackers growing in numbers and sophistication CISA wants you to patch these actively exploited vulnerabilities before September 8 Reddit users crowdsourcing explicit images and identities Criminals socially engineer their way to bank details with fake arrest...

0.6AI score
SaveExploits0
HackRead
HackRead
added 2022/08/25 12:25 p.m.21 views

Plex Breach – Streaming Giant Issues Mass Password Reset to Millions

By Deeba Ahmed Plex has implemented a mass password reset after hackers stole usernames, email addresses, and encrypted passwords of 15 to 30 million of its customers. This is a post from HackRead.com Read the original post: Plex Breach - Streaming Giant Issues Mass Password Reset to Millions...

2.5AI score
SaveExploits0
OSV
OSV
added 2022/06/20 6:20 p.m.17 views

MAL-2022-3748 Malicious code in ibm-plex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a08863644080b69fd27e2ddd5b80b60066ae62b1e042323f1d6f2c043998b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 6:20 p.m.7 views

Malicious code in ibm-plex (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e9a08863644080b69fd27e2ddd5b80b60066ae62b1e042323f1d6f2c043998b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
Rows per page
Query Builder