This Week in Security News – October 21, 2021

In this week in security news, learn about a new backdoor from PurpleFox that utilizes WebSockets for more secure communication the link between the Sinclair ransomware attack and the cybercrime group Evil Corp...

PurpleFox Adds New Backdoor That Uses WebSockets

In September 2021, the Trend Micro Managed XDR MDR team looked into suspicious activity related to a PurpleFox operator. Our findings led us to investigate an updated PurpleFox arsenal, which included an added vulnerability CVE-2021-1732 and optimized rootkit capabilities leveraged in their attac...

aaugustin communication protocol WebSocket Information Disclosure

The vulnerability of the aaugustin communication protocol’s websockets in the Python programming language is related to an error that occurs when basic authentication using basicauthprotocolfactorycredentials=... is enabled. Exploiting this vulnerability can allow a remote attacker to gain access...

com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex (>=1.2.2, <=1.2.3), com.googlecode.protobuf-rpc-pro:protobuf-streamer-pro (>=1.2.2, <=1.2.3) +39 more potentially affected by CVE-2021-37136 via io.netty:netty (3.4.6.final)

io.netty:netty MAVEN version 3.4.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - com.googlecode.protobuf-rpc-pro:protobuf-rpc-pro-duplex =1.2.2, =1.2.2, =1.2.3 - net.databinder:unfiltered-netty-server2.8.1...

Nimplant - A Cross-Platform Implant Written In Nim

Nimplant is a cross-platform Linux & Windows implant written in Nim as a fun project to learn about Nim and see what it can bring to the table for red team tool development. Currently, Nimplant lacks extensive evasive tradecraft; however, overtime Nimplant will become much more sophisticated...

io.undertow:undertow-servlet (1.0.0.alpha3), io.undertow:undertow-websockets-jsr (1.0.0.alpha3) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha3)

io.undertow:undertow-core MAVEN version 1.0.0.alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha3 - io.undertow:undertow-websockets-jsr 1.0.0.alpha3 Source...

io.undertow:undertow-servlet (1.0.0.alpha12), io.undertow:undertow-websockets-jsr (1.0.0.alpha12) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha12)

io.undertow:undertow-core MAVEN version 1.0.0.alpha12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha12 - io.undertow:undertow-websockets-jsr 1.0.0.alpha12 Source...

io.undertow:undertow-servlet (1.0.0.alpha13), io.undertow:undertow-websockets-jsr (1.0.0.alpha13) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha13)

io.undertow:undertow-core MAVEN version 1.0.0.alpha13 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha13 - io.undertow:undertow-websockets-jsr 1.0.0.alpha13 Source...

io.undertow:undertow-servlet (1.0.0.alpha11), io.undertow:undertow-websockets-jsr (1.0.0.alpha11) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha11)

io.undertow:undertow-core MAVEN version 1.0.0.alpha11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha11 - io.undertow:undertow-websockets-jsr 1.0.0.alpha11 Source...

io.undertow:undertow-servlet (1.0.0.alpha9), io.undertow:undertow-websockets-jsr (1.0.0.alpha9) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha9)

io.undertow:undertow-core MAVEN version 1.0.0.alpha9 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha9 - io.undertow:undertow-websockets-jsr 1.0.0.alpha9 Source...

io.undertow:undertow-dist (1.0.0.alpha1), io.undertow:undertow-servlet (1.0.0.alpha1) +1 more potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha1)

io.undertow:undertow-core MAVEN version 1.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-dist 1.0.0.alpha1 - io.undertow:undertow-servlet 1.0.0.alpha1 -...

io.undertow:undertow-servlet (1.0.0.alpha2), io.undertow:undertow-websockets-jsr (1.0.0.alpha2) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha2)

io.undertow:undertow-core MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha2 - io.undertow:undertow-websockets-jsr 1.0.0.alpha2 Source...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-servlet (1.0.0.alpha6), io.undertow:undertow-websockets-jsr (1.0.0.alpha6) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha6)

io.undertow:undertow-core MAVEN version 1.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha6 - io.undertow:undertow-websockets-jsr 1.0.0.alpha6 Source...

io.undertow:undertow-servlet (1.0.0.alpha10), io.undertow:undertow-websockets-jsr (1.0.0.alpha10) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha10)

io.undertow:undertow-core MAVEN version 1.0.0.alpha10 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha10 - io.undertow:undertow-websockets-jsr 1.0.0.alpha10 Source...

io.undertow:undertow-servlet (1.0.0.alpha14), io.undertow:undertow-websockets-jsr (1.0.0.alpha14) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha14)

io.undertow:undertow-core MAVEN version 1.0.0.alpha14 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha14 - io.undertow:undertow-websockets-jsr 1.0.0.alpha14 Source...

io.undertow:undertow-servlet (1.0.0.alpha8), io.undertow:undertow-websockets-jsr (1.0.0.alpha8) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha8)

io.undertow:undertow-core MAVEN version 1.0.0.alpha8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha8 - io.undertow:undertow-websockets-jsr 1.0.0.alpha8 Source...

io.undertow:undertow-servlet (1.0.0.alpha5), io.undertow:undertow-websockets-jsr (1.0.0.alpha5) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha5)

io.undertow:undertow-core MAVEN version 1.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha5 - io.undertow:undertow-websockets-jsr 1.0.0.alpha5 Source...

io.undertow:undertow-servlet (1.0.0.alpha7), io.undertow:undertow-websockets-jsr (1.0.0.alpha7) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha7)

io.undertow:undertow-core MAVEN version 1.0.0.alpha7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha7 - io.undertow:undertow-websockets-jsr 1.0.0.alpha7 Source...

io.undertow:undertow-servlet (1.0.0.alpha19), io.undertow:undertow-websockets-jsr (1.0.0.alpha19) potentially affected by CVE-2021-20220 via io.undertow:undertow-core (1.0.0.alpha19)

io.undertow:undertow-core MAVEN version 1.0.0.alpha19 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha19 - io.undertow:undertow-websockets-jsr 1.0.0.alpha19 Source...