14411 matches found
Blockforia: A Comprehensive Analysis of a Prominent Cryptocurrency Exchange
By Owais Sultan Blockforia functions as a cryptocurrency exchange firmly grounded within the regulatory purview of the European Union. This is a post from HackRead.com Read the original post: Blockforia: A Comprehensive Analysis of a Prominent Cryptocurrency Exchange...
Analysis: A Ransomware Attack on a PostgreSQL Database
In 2017, we reported on a database ransomware campaign targeting MySQL and MongoDB. Since then, we’ve observed similar attack tactics on a PostgreSQL database in Imperva Threat Research lab. In general, the attack flow contained: A brute force attack on the database for known users and weak...
Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Ashlar-Vellum Equipment : Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share Vulnerabilities : Out-of-Bounds Write, Heap-based Buffer Overflow, Out-of-Bounds Read 2. RISK EVALUATION Successful...
Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar
CVE-2023-38831 CVE-2023-38831 is an RCE in WinRAR 6.23...
Malicious code in fbdebug (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2edf3045263e059e2b1599655b25cc167abecc4d1e77e5e7e8d62998b0fd9e18 The OpenSSF Package Analysis project identified 'fbdebug' @ 0.1 pypi as malicious. It is considered malicious because: - The package communicate...
Malicious code in billing.api (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 507cfdb034cfdde119a280e16b6ad66952ff26fd821fd25ec866bf04f29398f1 The OpenSSF Package Analysis project identified 'billing.api' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
HCL Technologies AppScan Presence Elevation of Privilege Vulnerability
HCL Technologies AppScan Presence is a suite of dynamic analysis testing tools from HCL Technologies, USA, which is mainly used for Web security testing. An elevation of privilege vulnerability exists in HCL Technologies AppScan Presence, which stems from the presence of an un-referenced service...
Malicious code in ux-website (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1ed957b968f0d201b3698f9027b13297541196d608edb84f496f3262569e5a81 The OpenSSF Package Analysis project identified 'ux-website' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
In-Depth Analysis of Phobos Ransomware
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Phobos ransomware, active since 2018, primarily targets small to medium-sized businesses with lower ransom demands. It uses compromised RDP connections, is distributed via a Ransomware as a Service model...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 – Confluence OGNL injection vulnerability Sc...
MAL-2023-8391 Malicious code in @banana-cake-pop/data (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 62a20ff9ddb55a8de5c7bffe9455b25f0fca2223207e80cf7b9d7993bd02db12 The OpenSSF Package Analysis project identified '@banana-cake-pop/data' @ 1.9.10 npm as malicious. It is considered malicious because: - The...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : QEMU update (USN-3651-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3651-1 advisory. Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow...
Deep Analysis of Hospitality Phishing Campaign Shows Global Threat
...
Deep Analysis of Hospitality Phishing Campaign Shows Global Threat
...
MAL-2023-8390 Malicious code in @syska/aca-gui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c3f4460092e1b289ec60a15ed80e3a418d95fc95a42072bc38a787c9db2f5cf1 The OpenSSF Package Analysis project identified '@syska/aca-gui' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware
CVE202320198Detector This script can identify if Cisco IOS...
Why logging is one of the most overlooked aspects of incident response, and how Cisco Talos IR can help
By Rami Altalhi and David Roman. Logs are fundamental to strengthening an organizations digital defenses. Many logs within an organization contain records related to computer security. These computer security logs are generated by many sources, including security software, workstations, servers,...
OSV-2023-1025 Heap-buffer-overflow in ucl_hash_destroy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63299 Crash type: Heap-buffer-overflow READ 8 Crash state: uclhashdestroy uclobjectdtorunrefsingle uclobjectdtorunref...
Discover and Assess the Risk of Embedded Open-Source Software (OSS) Vulnerabilities
Runtime Software Composition Analysis with the Qualys Cloud Agent In a blog post published last week, we discussed the importance of managing risk across software developed in-house. A great deal of that risk is introduced by vulnerabilities in open-source packages like Log4Shell, OpenSSL, etc...