111 matches found
Muddywater Utilizes Custom Tools to Target Telecom Companies
Summary: Iranian espionage group Muddywater,targeted telecommunications companies in Egypt, Sudan, and Tanzania in November 2023. The attackers employed a diverse set of tools for this activity, including leveraging the MuddyC2Go infrastructure. Additionally, they utilized the SimpleHelp remote...
Iranian Hackers Using MuddyC2Go in Telecom Espionage Attacks Across Africa
The Iranian nation-state actor known as MuddyWater has leveraged a newly discovered command-and-control C2 framework called MuddyC2Go in its attacks on the telecommunications sector in Egypt, Sudan, and Tanzania. The Symantec Threat Hunter Team, part of Broadcom, is tracking the activity under th...
Beware: Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with Venom RAT
A malicious actor released a fake proof-of-concept PoC exploit for a recently disclosed WinRAR vulnerability on GitHub with an aim to infect users who downloaded the code with Venom RAT malware. "The fake PoC meant to exploit this WinRAR vulnerability was based on a publicly available PoC script...
Meet 'Jack' from Romania! Mastermind Behind Golden Chickens Malware
The identity of the second threat actor behind the Golden Chickens malware has been uncovered courtesy of a "fatal" operational security blunder, cybersecurity firm eSentire said. The individual in question, who lives in Bucharest, Romania, has been given the codename Jack. He is one of the two...
Debian: Security Advisory (DLA-249-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K16620: QEMU vulnerability CVE-2015-3456
Security Advisory Description An out-of-bounds memory access flaw, also known as "VENOM," was found in the way QEMU's virtual Floppy Disk Controller FDC handled FIFO buffer access while processing certain FDC commands. A privileged guest user could use this flaw to crash the guest or, potentially...
LodaRAT Malware Resurfaces with New Variants Employing Updated Functionalities
The LodaRAT malware has resurfaced with new variants that are being deployed in conjunction with other sophisticated malware, such as RedLine Stealer and Neshta. "The ease of access to its source code makes LodaRAT an attractive tool for any threat actor who is interested in its capabilities,"...
Mageia: Security Advisory (MGASA-2015-0228)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:0943-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:0927-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: Venom vulnerability affects IBM Flex System Manager (FSM) (CVE-2015-3456)
Summary IBM Flex System Manager FSM is vulnerable to Venom: "Virtualized Environment Neglected Operation Manipulation." Vulnerability Details Summary IBM Flex System Manager FSM is vulnerable to Venom: "Virtualized Environment Neglected Operation Manipulation." Vulnerability Details: CVE-ID:...
Denial Of Service (DoS)
qemu-kvm is vulnerable to denial of service DoS attacks. The vulnerability exists as the Floppy Disk Controller FDC in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service out-of-bounds write and guest crash or possibly execute arbitrary code via t...
Security Bulletin:Venom qemu vulnerability affects PowerKVM (CVE-2015-3456)
Summary PowerKVM is vulnerable to Venom: Virtualized Environment Neglected Operation Manipulation". Vulnerability Details CVEID: CVE-2015-3456 DESCRIPTION: QEMU is vulnerable to a buffer overflow, caused by improper bounds checking by the Floppy Disk Controller FDC emulation. By sending specially...
Security Bulletin: Venom vulnerability affects IBM SmartCloud Provisioning 2.1 for IBM Software Virtual Appliance
Summary IBM SmartCloud Provisioning 2.1 for IBM Software Virtual Appliance is vulnerable to Venom: Virtualized Environment Neglected Operation Manipulation CVE-2015-3456. Vulnerability Details CVE-ID: CVE-2015-3456 DESCRIPTION: Open Source QEMU Quick Emulator is vulnerable to a buffer overflow,...
Security Bulletin: Venom vulnerability affects IBM PureApplication System (CVE-2015-3456)
Summary IBM PureApplication System is vulnerable to Venom: "Virtualized Environment Neglected Operation Manipulation". Vulnerability Details CVEID: CVE-2015-3456 DESCRIPTION: QEMU is vulnerable to a buffer overflow, caused by improper bounds checking by the Floppy Disk Controller FDC emulation. B...
Fsociety Hacking Tools Pack
Fsociety Menu Information Gathering Password Attacks Wireless Testing Exploitation Tools Sniffing & Spoofing Web Hacking Private Web Hacking Post Exploitation INSTALL & UPDATE Information Gathering : Nmap Setoolkit Port Scanning Host To IP wordpress user CMS scanner XSStracer Dork – Google Dorks...
Malicious Debian Package Generator: kimi
Malicious Debian Package generator Script to generate malicious debian packages debain trojans. Kimi is a script which generates Malicious debian package for metasploit which consists of bash file. the bash file is deployed into “/usr/local/bin/” directory. Backdoor gets executed just when victim...
Venom - Lenovo Support US
No description provided...
Venom
Lenovo Security Advisory: LEN-2015-046 Potential Impact: Escalation of Privileges Severity: High Summary: A buffer overflow vulnerability affecting the Floppy Disk Controller FDC emulation implemented in the QEMU component has been identified in the KVM/QEMU and Xen hypervisors. This vulnerabilit...
GLSA-201604-03 : Xen: Multiple vulnerabilities (Venom)
The remote host is affected by the vulnerability described in GLSA-201604-03 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details. Impact : A local attacker could possibly cause a Denial of Service...