TA505 Gang Is Back With Newly Polished FlawedGrace RAT

The TA505 cybercrime group is whirring its financial rip-off machinery back up, pelting malware at a range of industries in what was initially low-volume waves that researchers saw spiral up late last month. They do bad things, but they’re so tricky that tracking them is a ton of fun, said Sherro...

in microweber/microweber

Description For comments when the captcha is enable, the attacker can send many spam comments only with first correct captcha code, this means attacker only one time enter the captcha and then can use it for many many times and make damage on availability of system...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

Design/Logic Flaw

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-34814

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

CVE-2021-34814

CVE-2021-34814 affects Proofpoint Spam Engine prior to 8.12.0-2106240000. The issue is a Security Control Bypass due to an access control error in the product, with impact described as HIGH availability risk (per CVSS 3.1) and no confidential/integrity impact indicated. Connected sources confirm ...

Proofpoint Spam Engine 访问控制错误漏洞

Proofpoint Spam Engine is an email filter from Proofpoint USA, Inc. It is used to filter inbound and outbound email traffic for service filtering organizations. An Access Control Error vulnerability exists in Proofpoint Spam Engine, which stems from the product allowing .dat files to be sent via...

PT-2021-20667

Name of the Vulnerable Software and Affected Versions: Proofpoint Spam Engine versions prior to 8.12.0-2106240000 Description: The issue is related to a Security Control Bypass in the Proofpoint Spam Engine. Recommendations: For versions prior to 8.12.0-2106240000, update to version...

CVE-2021-34814: Undefined Security Weakness

Proofpoint Spam Engine before 8.12.0-2106240000 has a Security Control Bypass...

cvhelper (0.1.0), deepomatic-cli (>=0.3.0, <=0.5.1) +4 more potentially affected by CVE-2019-5064 via opencv-python (3.4.3.18)

opencv-python PYPI version 3.4.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - cvhelper 0.1.0 - deepomatic-cli =0.3.0, =2.0.0, =0.1.7, =0.3.3, =1.1.0, =1.4.0 Source cves: CVE-2019-5064 Source advisory:...

spam (0.5.2.1), supervisely (>=6.1.29, <=6.1.48) potentially affected by CVE-2019-5064 via opencv-python (3.4.10.35)

opencv-python PYPI version 3.4.10.35 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - spam 0.5.2.1 - supervisely =6.1.29, =6.1.48 Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

spam (0.5.2.1), supervisely (>=6.1.29, <=6.1.48) potentially affected by CVE-2019-5063 via opencv-python (3.4.10.35)

opencv-python PYPI version 3.4.10.35 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - spam 0.5.2.1 - supervisely =6.1.29, =6.1.48 Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

spam (0.5.2.1), supervisely (>=6.1.29, <=6.1.48) potentially affected by CVE-2019-19624 via opencv-python (3.4.10.35)

opencv-python PYPI version 3.4.10.35 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - spam 0.5.2.1 - supervisely =6.1.29, =6.1.48 Source cves: CVE-2019-19624 Source advisory: OSV:GHSA-JGGW-2Q6G-C3M6...

spam (0.5.2.1), supervisely (>=6.1.29, <=6.1.48) potentially affected by CVE-2019-15939 via opencv-python (3.4.10.35)

opencv-python PYPI version 3.4.10.35 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - spam 0.5.2.1 - supervisely =6.1.29, =6.1.48 Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

cvhelper (0.1.0), deepomatic-cli (>=0.3.0, <=0.5.1) +4 more potentially affected by CVE-2019-14493 via opencv-python (3.4.3.18)

opencv-python PYPI version 3.4.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - cvhelper 0.1.0 - deepomatic-cli =0.3.0, =2.0.0, =0.1.7, =0.3.3, =1.1.0, =1.4.0 Source cves: CVE-2019-14493 Source advisory:...

Fedora: Security Advisory for libspf2 (FEDORA-2021-994751581f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MSC-2021-2149

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive user system data –...

The Ransomware Killchain: How It Works, and How to Protect Your Systems

Much ado has been made by this very author on this very blog! about the incentives for attackers and defenders around ransomware. There is also a wealth of information on the internet about how to protect yourself from ransomware. One thing we want to avoid losing sight of, however, is just how w...