10938 matches found
WordPress WP Armour – Honeypot Anti Spam plugin <= 1.5.6 - Cross-Site Scripting (XSS) vulnerability
Cross-Site Scripting XSS vulnerability found in WordPress WP Armour – Honeypot Anti Spam plugin versions = 1.5.6. Solution Update the WordPress WP Armour – Honeypot Anti Spam plugin to the latest available version at least 1.5.7...
Agent Tesla Malware Spotted Using New Delivery & Evasion Techniques
Security researchers on Tuesday uncovered new delivery and evasion techniques adopted by Agent Tesla remote access trojan RAT to get around defense barriers and monitor its victims. Typically spread through social engineering lures, the Windows spyware not only now targets Microsoft's Antimalware...
European Authorities Disrupt Emotet — World's Most Dangerous Malware
Law enforcement agencies from as many as eight countries dismantled the infrastructure of Emotet , a notorious email-based Windows malware behind several botnet-driven spam campaigns and ransomware attacks over the past decade. The coordinated takedown of the botnet on Tuesday — dubbed "Operation...
The vulnerability in the implementation of the Punycode sequence transformation method in Mozilla Firefox browsers allows attackers to perform spamming attacks.
The vulnerability of the Punycode sequence transformation method implemented in Mozilla Firefox browsers is related to the lack of a mechanism for checking input data. Exploiting this vulnerability allows attackers who operate remotely to carry out spam attacks...
Hackers Using Fake Trump's Scandal Video to Spread QNode Malware
Cybesecurity researchers today revealed a new malspam campaign that distributes a remote access Trojan RAT by purporting to contain a sex scandal video of U.S. President Donald Trump. The emails, which carry with the subject line "GOOD LOAN OFFER!!," come attached with a Java archive JAR file...
2020 Ends With A Bang
December 2020 was an eventful month in cyber security. This blog recaps three of the major security events we saw towards the end of last year. December began with FireEye’s breach announcement that included a leak of its red team tools arsenal. Quickly after this announcement, Imperva Threat...
CVE-2020-35658
SpamTitan before 7.09 allows attackers to tamper with backups, because backups are not encrypted...
iPhone Calendar Events spam is back: Here’s how to get rid of it
By Asad Remember the old annoying iPhone Calendar Events Spam? It’s back and worse than before. This is a post from HackRead.com Read the original post: iPhone Calendar Events spam is back: Here’s how to get rid of it...
Copperfasten Technologies TitanHQ SpamTitan Encryption Issue Vulnerability
Copperfasten Technologies TitanHQ SpamTitan is a spam filter from Copperfasten Technologies, Ireland. The product blocks email threats such as spam, viruses, malware, ransomware and phishing. A security vulnerability exists in SpamTitan versions prior to 7.09, which stems from a vulnerability tha...
The vulnerability of the spam protection mechanism in the Cisco AsyncOS operating system of the Cisco Email Security Appliance (ESA) allows a hacker to bypass the URL filtering.
The vulnerability of the spam protection mechanism in Cisco’s operating system, Cisco AsyncOS, within Cisco Email Security Appliance ESA, is related to errors during the validation of incoming URL addresses. Exploiting this vulnerability could allow a malicious actor to bypass the URL filtering...
The chronicles of Emotet
More than six years have passed since the banking Trojan Emotet was first detected. During this time it has repeatedly mutated, changed direction, acquired partners, picked up modules, and generally been the cause of high-profile incidents and multimillion-dollar losses. The malware is still in...
VulnCheck KEV: CVE-2005-2847
img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter...
VulnCheck KEV: CVE-2005-2848
Directory traversal vulnerability in img.pl in Barracuda Spam Firewall running firmware 3.1.16 and 3.1.17 allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...
November spam roundup: Stalkers, property tips, porn, stern words and PayPal
Today were rounding up some of the interesting pieces of spam currently in circulation, taking in everything from housing deals to mysteriously free slices of cash. You may have seen some of these already. Hopefully we can help make up your mind about whatevers lurking in your mailbox. A full hou...
Logic Flaw Vulnerability in the Account Appeal Function of the Identity Management System of Lianyi Technology Co.
As the security authentication and authorization center of the digital campus, the identity management system provides a series of comprehensive authentication, authorization control and management tools to provide all-round and multi-level licensing, control and management of data access and use...
Anti-Spam by CleanTalk < 5.149 - Multiple Authenticated SQL Injections
Multiple authenticated SQL injections in the Anti-Spam by CleanTalk plugin 5.148 exist, however, it requires high privilege user admin+. PoC Vulnerable functions: removeLogs and removeSpam at: lib/Cleantalk/ApbctWP/FindSpam/ListTable/Users.php Sleep query: POST...
WordPress Anti-Spam by CleanTalk plugin <= 5.148 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities
Multiple Authenticated SQL Injection SQLi vulnerabilities found by Nguyen Anh Tien in WordPress Anti-Spam by CleanTalk plugin versions = 5.148. Solution Update the WordPress Anti-Spam by CleanTalk plugin to the latest available version at least 5.149...
Body Found in Canada Identified as Neo-Nazi Spam King
The body of a man found shot inside a burned out vehicle in Canada three years ago has been identified as that of Davis Wolfgang Hawke, a prolific spammer and neo-Nazi who led a failed anti-government march on Washington, D.C. in 1999, according to news reports. Homicide detectives said they...
WooCommerce Blocks < 3.7.1 - Guest Account Creation
Versions of WooCommerce prior to 4.6.2 contain a vulnerability that allows guest users to create accounts during checkout even when the "Allow customers to create an account during checkout" setting is disabled. This vulnerability is being exploited by a bot to place spam orders and create user...
