2721 matches found
CVE-2021-43540
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox 95...
CVE-2021-43540
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox 95...
Amazon Web Service outage is impacting major websites
By Waqas Amazon Web Service AWS is suffering a major service outage that is affecting popular platforms in regions where the company provides services. This is a post from HackRead.com Read the original post: Amazon Web Service outage is impacting major websites...
NICKEL targeting government organizations across Latin America and Europe
The Microsoft Threat Intelligence Center MSTIC has observed NICKEL, a China-based threat actor, targeting governments, diplomatic entities, and non-governmental organizations NGOs across Central and South America, the Caribbean, Europe, and North America. MSTIC has been tracking NICKEL since 2016...
Scalpers, and their bot armies, swing in to net web-based Spiderman tickets
29 November 2021 was “Spider Monday” and tickets for Marvel’s film Spider-Man: No Way Home went on sale with the sort of marketing fervor for which Disney and the Marvel Cinematic Universe MCU are famous. As tickets to one of the most eagerly anticipated Christmas films featuring one of the most...
Remote access tools abused to spread malware and steal cryptocurrency
By Waqas The new campaign also involves replacing cryptocurrency addresses shared via clipboard and setting up fake cryptocurrency websites. This is a post from HackRead.com Read the original post: Remote access tools abused to spread malware and steal cryptocurrency...
4 Android Banking Trojan Campaigns Targeted Over 300,000 Devices in 2021
Four different Android banking trojans were spread via the official Google Play Store between August and November 2021, resulting in more than 300,000 infections through various dropper apps that posed as seemingly harmless utility apps to take full control of the infected devices. Designed to...
Campaign Abusing Legitimate Remote Administrator Tools Uses Fake Cryptocurrency Websites
We have been tracking a campaign involving the SpyAgent malware that abuses well-known remote access tools RATs for some time now. While previous versions of the malware have been covered by other researchers, our blog entry focuses on the malicious actor’s latest attacks...
Dell EMC CloudLink Input Validation Error Vulnerability (CNVD-2021-92445)
Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private and hybrid cloud environments.Dell EMC CloudLink 7.1 and earlier versions are vulnerable to an input validation error that can be exploited by remote, low-privilege attackers to...
CVE-2021-36332
Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, directing end user to arbitrary and potentially malicious websites...
Design/Logic Flaw
Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, directing end user to arbitrary and potentially malicious websites...
CVE-2021-36332
Dell EMC CloudLink 7.1 and all prior versions contain a HTML and Javascript Injection Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, directing end user to arbitrary and potentially malicious websites...
Dell EMC CloudLink 输入验证错误漏洞
Dell EMC CloudLink is a flexible data encryption and key management solution for data encryption in public, private and hybrid cloud environments.Dell EMC CloudLink 7.1 and earlier versions are vulnerable to an input validation error that can be exploited by remote, low-privilege attackers to...
How to defend your website against card skimmers
Black Friday and the holiday season are approaching, and shoppers are forecast to spend record amounts again this year. Retail websites big and small can expect a lot of interest from shoppers looking for deals, and a lot of interest from cybercriminals looking to cash in on those shoppers, by...
U.S. Dept Of Defense: Rxss on █████████ via logout?service=javascript:alert(1)
Description: I found open redirect and xss Rxss at the ██████████ logout page, https://████/██████████/logout?service=https://google.com It also allows javascript URIs, leading to Xss Impact Attacker can trick users to visit malicious websites or can lead to phishing and many other type of attack...
The vulnerability in the web interface of the Cisco Webex Video Mesh software allows a attacker to redirect users to a malicious web page.
The vulnerability of the Cisco Webex Video Mesh software management web interface is related to the possibility of redirecting users to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to malicious web pages...
Researchers Demonstrate New Way to Detect MitM Phishing Kits in the Wild
No fewer than 1,220 Man-in-the-Middle MitM phishing websites have been discovered as targeting popular online services like Instagram, Google, PayPal, Apple, Twitter, and LinkedIn with the goal of hijacking users' credentials and carrying out further follow-on attacks. The findings come from a ne...
Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2021-94901)
Microsoft Visual Studio is an integrated development environment for developing computer programs, websites, web applications, web services, and mobile applications. an elevation of privilege vulnerability exists in Microsoft Visual Studio. An attacker could exploit this vulnerability to elevate...
The vulnerability of the redirect parameter in the fastify-static plugin allows a hacker to redirect users of Mozilla Firefox to arbitrary websites.
The vulnerability of the redirect parameter in the fastify-static plugin relates to the ability to redirect users to untrusted URLs. Exploiting this vulnerability allows a malicious actor to redirect users of Mozilla Firefox to arbitrary websites...
Zebra2104 Initial Access Broker Supports Rival Malware Gangs, APTs
Three separate threat groups are all using a common initial access broker IAB to enable their cyberattacks, according to researchers – a finding that has revealed a tangled web of related attack infrastructure underpinning disparate and in some cases rival malware campaigns. The BlackBerry Resear...