IBM i 资源管理错误漏洞

IBM i is a set of operating systems from IBM in the United States that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i SMTP, which can be exploited by an attacker to consume network bandwidth and disk space that may not be necessary and send spam...

CVE-2021-20501

IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remot...

UPchieve: Hyper Link Injection while signup

Summary: Attacker can add their name to a URL in order to send email containing malicious hyperlinks. while signup Steps To Reproduce: 1-Go to https://app.upchieve.org and create account with the first name http://attacker.com/ and last name . 2-Now check your email and you notice there is...

Top 5 Most Vicious Bad Bots

Classified by The Open Web Application Security Project OWASP as ‘automated threats’, bad bots can be used to perform a plethora of actions on the application layer, from basic requests to elaborate sessions with sophisticated requests. Some of these bots are more malicious than others. This make...

A Spike in BazarCall and IcedID Activity Detected in March

We discuss the cases of BazarCall and IcedID we observed in March. Both are known for the use of spam to deliver their payloads...

Threat Source Newsletter (April 8, 2021)

Newsletter compiled by Jon Munshaw. Good afternoon, Talos readers. We've all heard about spam coming through your email or those robocalls we all hate. But during the COVID-19 pandemic, attackers are now turning to chat rooms and gaming servers to spread spam. Talos researchers this... This is on...

[SECURITY] Fedora 32 Update: spamassassin-3.4.5-1.fc32

SpamAssassin provides you with a way to reduce if not completely eliminate Unsolicited Commercial Email SPAM from your incoming email. It can be invoked by a MDA such as sendmail or postfix, or can be called from a procmail script, .forward file, etc. It uses a genetic-algorithm evolved scoring...

Fedora: Security Advisory for spamassassin (FEDORA-2021-5a4377797c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Injecting Deception Mid-Pandemic: Covid-19 Vaccine Related Threats

We share some of our findings on malware, spam, phishing schemes, malicious websites, and illicit markets that use Covid-19 vaccines as a lure...

Wordpress CleanTalk SQL Injection Vulnerability

Wordpress CleanTalk is an application plugin for Wordpress. Provides a free anti-spam plugin that works with the premium Cloud AntiSpam service cleantalk.org. Anti-Spam by CleanTalk WordPress plugin before 5.149 suffers from a SQL injection vulnerability that stems from entering unverified...

CVE-2021-24131

Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user admin+...

CVE-2021-24131 Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections

Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user admin+...

CVE-2021-24131

CVE-2021-24131 affects the WordPress plugin Anti-Spam by CleanTalk, prior to version 5.149. The vulnerability arises from unvalidated input in the plugin’s anti-spam handling, enabling multiple authenticated SQL injections that require a high-privilege admin user. Public details reference vulnera...

Wordpress CleanTalk SQL注入漏洞

Wordpress CleanTalk is an application plugin for Wordpress. Provides a free anti-spam plugin that works with the premium Cloud AntiSpam service cleantalk.org. Anti-Spam by CleanTalk WordPress plugin before 5.149 suffers from a SQL injection vulnerability that stems from entering unverified...

TrickBot Takes Over, After Cops Kneecap Emotet

A massive malicious spam campaign, along with the global takedown of Emotet, has vaulted the TrickBot trojan to the top of the Check Point’s list of the most popular malware among cybercriminals for February. In January, TrickBot was ranked third on Check Point’s list, and it was fourth overall f...

DRUPAL-CONTRIB-2021-004

The Webform module for Drupal 8/9 includes a default Contact webform, which sends a notification email to the site owner and a confirmation email to the email address supplied via the form. The confirmation email can be used as an open mail relay to send an email to any email address. This...

Webform - Moderately critical - Access bypass - SA-CONTRIB-2021-004

The Webform module for Drupal 8/9 includes a default Contact webform, which sends a notification email to the site owner and a confirmation email to the email address supplied via the form. The confirmation email can be used as an open mail relay to send an email to any email address. This...

LazyScripter: From Empire to double RAT

Malwarebytes’ Threat Intelligence analysts are continually researching and monitoring active malware campaigns and actor groups as the prevalence and sophistication of targeted attacks rapidly evolves. In this paper, we introduce a new APT group we have named LazyScripter, presenting in-depth...

Spam and phishing in 2020

Figures of the year In 2020: The share of spam in email traffic amounted to 50.37%, down by 6.14 p.p. from 2019. Most spam 21.27% originated in Russia. Kaspersky solutions detected a total of 184,435,643 malicious attachments. The email antivirus was triggered most frequently by email messages...

WordPress NextGEN Gallery Plugin < 3.5.0 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:imagely:nextgengallery"; if description...