Backdoor.Win32.Hupigon.aejq Man-In-The-Middle

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/2a366cea300b84b4e6f8204a8c229266B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.aejq Vulnerability: Port Bounce Scan Description: The malware listens on TCP...

Trojan-Proxy.Win32.Raznew.gen Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/033ccd3a926441c49d3898dab97aefed.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan-Proxy.Win32.Raznew.gen Vulnerability: Unauthenticated Open Proxy Description: The malware...

Backdoor.Win32.Hupigon.abe Unauthenticated Open Proxy

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5d7908e7e95d0eb4a7351d24605e62a6.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hupigon.abe Vulnerability: Unauthenticated Open Proxy Description: The malware listen...

Cross-site Scripting (XSS) - Stored in yogeshojha/rengine

✍️ Description 'Delete Scheduled Task' confirmation model executes javascript as part of the name of a scan engine. 🕵️‍♂️ Proof of Concept 1. Name a scan engine as a XSS payload. Example: 2. Schedule a scan for any target using the created scan engine. 3. Try to delete the scheduled task Location...

Foxit PhantomPDF < 10.1.5 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.5. It is, therefore affected by multiple vulnerabilities: - This vulnerability allows remote attackers to execute arbitrary code on affected installations of...

Foxit PDF Reader和Foxit PDF Editor 缓冲区错误漏洞

Foxit PDF Reader and Foxit PDF Editor are both products of Foxit Corporation, a Chinese company. Foxit PDF Reader is a PDF reader and Foxit PDF Editor is a PDF editor. Versions prior to 11.0.1 have a security vulnerability that can be exploited to allow out-of-bounds reading via util.scan...

Apple’s neuralMatch tool will scan iPhones for child abuse content

By Deeba Ahmed Apple has developed a system dubbed neuralMatch to located child sexual abuse material/CSAM, and for now, it will scan US customers' devices. This is a post from HackRead.com Read the original post: Apples neuralMatch tool will scan iPhones for child abuse content...

F-secure Atlant 安全漏洞

F-secure Atlant is a platform for building applications that can scan and detect malicious files from the Finnish company F-Secure F-Secure. A security vulnerability exists in F-Secure Atlant. The vulnerability stems from the fact that the SAVAPI component may crash while scanning fuzzy files...

CVE-2021-32465

An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass authentication on affected installations. Please note: an attacker must first obtain the ability to execute...

GSD-2021-1001459 wl1251: Fix possible buffer overflow in wl1251_cmd_scan

wl1251: Fix possible buffer overflow in wl1251cmdscan This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.276 by commit...

GSD-2021-1001429 wl1251: Fix possible buffer overflow in wl1251_cmd_scan

wl1251: Fix possible buffer overflow in wl1251cmdscan This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.240 by commit...

GSD-2021-1001296 wl1251: Fix possible buffer overflow in wl1251_cmd_scan

wl1251: Fix possible buffer overflow in wl1251cmdscan This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.51 by commit...

PT-2021-25929

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29924

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-29686

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.3 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-25862

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A potential buffer overflow issue was identified in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-25766

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.51 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2021-25899

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.240 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2021-25691

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.3 Description: A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versio...

PT-2021-29857

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description A potential buffer overflow issue was discovered in the wl1251 cmd scan function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...