Lucene search
K

21 matches found

The Hacker News
The Hacker News
added 2026/01/24 11:9 a.m.10 views

Multi-Stage Phishing Campaign Targets Russia with Amnesia RAT and Ransomware

A new multi-stage phishing campaign has been observed targeting users in Russia with ransomware and a remote access trojan called Amnesia RAT. "The attack begins with social engineering lures delivered via business-themed documents crafted to appear routine and benign," Fortinet FortiGuard Labs...

6.3AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-7197

Malware in sbrugna...

7.5CVSS7.6AI score0.01111EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-7260

Malware in sbrugna...

5.4CVSS6.4AI score0.00266EPSS
Exploits0References4
F5 Networks
F5 Networks
added 2023/02/21 6:48 p.m.9 views

K35414143: AMNESIA:33 vulnerability

Security Advisory Description AMNESIA:33 is a set of 33 vulnerabilities that impact four open source TCP/IP stacks uIP, FNET, picoTCP and Nut/Net, which collectively serve as the foundational components of millions of connected devices worldwide. These vulnerabilities primarily cause memory...

7.1AI score
Exploits0
curl security advisories
curl security advisories
added 2023/02/15 8:0 a.m.6 views

HSTS amnesia with --parallel

curl's HSTS cache saving behaves wrongly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provided in the URL. This HSTS mechanism would however surprisingly fail when...

6.5CVSS6.8AI score0.00861EPSS
Exploits0References1Affected Software2
SonicWall
SonicWall
added 2021/01/06 9:25 p.m.4 views

Amnesia 33 vulnerabilities

Amnesia 33 vulnerabilities impacts four open source TCP/IP stacks uIP, FNET, picoTCP and Nut/Net libraries which are used in millions of smart IOT and embedded devices. These four open source TCP/IP stacks libraries are not used in the SonicWall firewall products. CVE: N/A Last updated: Jan. 6,...

9.8CVSS7.3AI score
Exploits0
The Hacker News
The Hacker News
added 2020/12/09 9:50 a.m.192 views

Amnesia:33 — Critical TCP/IP Flaws Affect Millions of IoT Devices

Cybersecurity researchers disclosed a dozen new flaws in multiple widely-used embedded TCP/IP stacks impacting millions of devices ranging from networking equipment and medical devices to industrial control systems that could be exploited by an attacker to take control of a vulnerable system...

9.8CVSS2AI score0.58695EPSS
Exploits0
The Hacker News
The Hacker News
added 2020/12/09 9:50 a.m.4 views

Amnesia:33 — Critical TCP/IP Flaws Affect Millions of IoT Devices

Cybersecurity researchers disclosed a dozen new flaws in multiple widely-used embedded TCP/IP stacks impacting millions of devices ranging from networking equipment and medical devices to industrial control systems that could be exploited by an attacker to take control of a vulnerable system...

9.8CVSS8.3AI score0.58695EPSS
Exploits0
Broadcom
Broadcom
added 2020/12/09 12:0 a.m.8 views

AMNESIA:33. (BSA-2020-1167)

Security Advisory ID: BSA-2020-1167 Component: Open source TCP/IP stacks. Revision: 1.1 Forescout Research Labs discovered 33 vulnerabilities impacting millions of IoT, OT, and IT devices that present an immediate risk for organizations worldwide.These vulnerabilities are named AMNESIA:33. Detail...

9.8CVSS6.8AI score0.58695EPSS
Exploits0
ThreatPost
ThreatPost
added 2020/12/08 11:0 a.m.48 views

'Amnesia:33' TCP/IP Flaws Affect Millions of IoT Devices

Researchers – as well as the U.S. Cybersecurity Infrastructure Security Agency CISA – are warning of a set of serious vulnerabilities affecting TCP/IP stacks. The flaws impact millions of internet-of-things IoT devices and embedded systems, including smart thermometers, smart plugs and printers...

8.4AI score
Exploits0References9
Wired Threat Level
Wired Threat Level
added 2020/12/08 5:1 a.m.33 views

Critical Flaws in Millions of IoT Devices May Never Get Fixed

Amnesia:33 is the latest in a long line of vulnerabilities that affect countless embedded devices...

2.9AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2020/12/08 12:0 a.m.57 views

Amnesia:33

Amnesia:33 is a group of 33 vulnerabilities in open-source TCP/IP stack libraries. The vulnerabilities may be present in a wide range of operational technology, IoT, and connected device implementations. Recent assessments: ccondon-r7 at December 08, 2020 9:05pm UTC reported: Sorta relying here o...

9.8CVSS1.9AI score0.58695EPSS
Exploits0References1
NCSC
NCSC
added 2020/12/08 12:0 a.m.7 views

Vulnerabilities in multiple TCP/IP stacks

Researchers at Forescout Research Labs have found 33 vulnerabilities found in four open source TCP/IP stacks. In the research called AMNESIA:33, four vulnerabilities are identified as critical. The highest assigned CVSS score is 9.8. The vulnerabilities allow a malicious party to carry out attack...

9.8CVSS7.5AI score0.58695EPSS
Exploits0
Prion
Prion
added 2018/10/30 5:29 p.m.11 views

Information disclosure

The Interactive Advertising Bureau IAB OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug...

5CVSS7.3AI score0.01111EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2018/10/30 5:29 p.m.15 views

CVE-2015-7266

The Interactive Advertising Bureau IAB OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug...

7.5CVSS7.6AI score0.01111EPSS
Exploits1References1
Cvelist
Cvelist
added 2018/10/30 5:0 p.m.13 views

CVE-2015-7266

The Interactive Advertising Bureau IAB OpenRTB 2.3 protocol implementation might allow remote attackers to conceal the status of ad transactions and potentially compromise bid integrity by leveraging failure to limit the time between bid responses and impression notifications, aka the Amnesia Bug...

7.5AI score0.01111EPSS
Exploits1References1
CVE
CVE
added 2018/10/30 5:0 p.m.37 views

CVE-2015-7266

The CVE-2015-7266 entry concerns the Interactive Advertising Bureau (IAB) OpenRTB 2.3 protocol implementation. Affected component: OpenRTB 2.3 protocol handling within the ad tech stack. Problem: an implementation flaw allows remote attackers to conceal the status of ad transactions and potential...

7.5CVSS7.5AI score0.01111EPSS
Exploits1References1Affected Software1
Packet Storm
Packet Storm
added 2015/11/13 12:0 a.m.18 views

Tails 1.6 Information Disclosure

Tails On Tails /dev/null | grep ^amnesia amnesia:$6$r0jt1v9E$UOrWbJ70qAH/sjaKfjmCMvkXZ19bqC2ieQ2UvYk0HKwVvgxuZFtyIwjoLfgH AwrZVM3a0NTEkcsQY1hn/Uq2S0:16710:0:99999:7:::...

7.4AI score
Exploits0
NVD
NVD
added 2014/10/19 10:55 a.m.17 views

CVE-2014-7389

The Amnesia Groove aka com.nobexinc.wls88552576.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00266EPSS
Exploits0References3
Cvelist
Cvelist
added 2014/10/19 10:0 a.m.16 views

CVE-2014-7389

The Amnesia Groove aka com.nobexinc.wls88552576.rc application 3.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00266EPSS
Exploits0References3
Rows per page
Query Builder