10264 matches found
Moodle SQL注入漏洞
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. Moodle 3.11 through 3.11.4 suffers from a SQL injection vulnerability that stems from insufficient cleaning of user-supplied data in th...
PT-2022-12310 · Coins · Coins Construction Cloud
Name of the Vulnerable Software and Affected Versions: COINS Construction Cloud version 11.12 Description: The issue is related to improper input neutralization, making it vulnerable to reflected cross-site scripting XSS via malicious links. This affects the search window and activity view window...
Mandiant-Azure-AD-Investigator - PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity
This repository contains a PowerShell module for detecting artifacts that may be indicators of UNC2452 and other threat actor activity. Some indicators are "high-fidelity" indicators of compromise, while other artifacts are so called "dual-use" artifacts. Dual-use artifacts may be related to thre...
A Bug in iOS 15 Is Leaking User Browsing Activity in Real Time
Apple has known about the vulnerability, which also affects iPadOS 15 and Safari 15, since late November...
Bug in Safari browser leaks personal identifiers and browsing activity
By Deeba Ahmed The bug affects the Safari 15 browser for Mac and all versions of Safari on iOS 15 and… This is a post from HackRead.com Read the original post: Bug in Safari browser leaks personal identifiers and browsing activity...
Active Exploitation of VMware Horizon Servers
This post is co-authored by Charlie Stafford, Lead Security Researcher. We will update this blog with further information as it becomes available. CVE | Vendor Advisory | AttackerKB | IVM Content | Patching Urgency | Blog's Last Update ---|---|---|---|---|--- CVE-2021-44228 | VMware Advisory |...
Cybercriminals Actively Target VMware vSphere with Cryptominers
Organizations running sophisticated virtual networks with VMware’s vSphere service are actively being targeted by cryptojackers, who have figured out how to inject the XMRig commercial cryptominer into the environment, undetected. Uptycs’ Siddharth Sharma has released research showing threat acto...
New ‘White Rabbit’ Ransomware May Be New FIN8 Tool
A new ransomware family, White Rabbit, chewed through a local U.S. bank last month — and it may be connected to the financially motivated advanced persistent threat APT group known as FIN8, researchers said. In a Tuesday report, Trend Micro researchers said that this twicky wabbit knows how to...
Samsung SecSettings Privilege Mismanagement Vulnerability (CNVD-2025-02716)
Samsung Mobile is a cell phone from the South Korean company Samsung. A privilege mismanagement vulnerability exists in Samsung SecSettings, which arises from a lack of proper privileges on an unprotected dynamic receiver in the system and can be exploited by an attacker to initiate arbitrary...
Crypto.com confirms suspicious activity after users report stolen funds
By Waqas Several Crypto.com users reported that their wallets suffered suspicious transactions that stole thousands of dollars in Ethereum ETH… This is a post from HackRead.com Read the original post: Crypto.com confirms suspicious activity after users report stolen funds...
ZOHO ManageEngine Log360 has an unspecified vulnerability
ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity and comply with regulatory? A security vulnerability...
Destructive malware targeting Ukrainian organizations
Microsoft Threat Intelligence Center MSTIC has identified evidence of a destructive malware operation targeting multiple organizations in Ukraine. This malware first appeared on victim systems in Ukraine on January 13, 2022. Microsoft is aware of the ongoing geopolitical events in Ukraine and...
CVE-2021-44739
creationtimestamp| type| source ---|---|--- 2022-01-14 22:25:38+00:00| seen| https://t.me/cibsecurity/35618...
CVE-2019-11718
Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper...
The vulnerability in the implementation of the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class in Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft.SharePoint.WorkflowActions.SetVariableActivity class in Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server implementations is related to the ability to restore a random type of .NET object by adding the SetVariableActivity...
CVE-2021-43972
creationtimestamp| type| source ---|---|--- 2022-01-11 22:16:21+00:00| seen| https://t.me/cibsecurity/35270 2022-01-22 08:45:24+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1646 2022-01-22 22:20:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5254...
Europol Ordered to Delete Data of Individuals With No Proven Links to Crimes
The European Union's data protection watchdog on Monday ordered Europol to delete a vast trove of personal data it obtained pertaining to individuals with no proven links to criminal activity. "Datasets older than six months that have not undergone this Data Subject Categorisation must be erased,...
CVE-2022-22267
Implicit Intent hijacking vulnerability in ActivityMetricsLogger prior to SMR Jan-2022 Release 1 allows attackers to get running application information...
