Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response

Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1289 The exploit gains code execution on the Wi-Fi firmware on the iPhone 7. The exploit has been tested against the Wi-Fi firmware as...

FLIR Systems FLIR Thermal Camera F/FC/PT/D Stream Disclosure

Summary FLIR's PT-Series of high-performance, multi-sensor pan/tilt cameras bring thermal and visible-light imaging together in a system that gives you video and control over both IP and analog networks. The PT-Series' precision pan/tilt mechanism gives you accurate pointing control while providi...

Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1289 The exploit gains code execution on the Wi-Fi firmware on the iPhone 7. The exploit has been tested against the Wi-Fi firmware as present on iOS 10.2 14C92, but should work on all versions of iOS up to 10.3.3 included. However...

CCleaner Backdoor Attack: A State-sponsored Espionage Campaign

By Waqas Infected CCleaner Software Attack that Affected 700,000 Customers is part This is a post from HackRead.com Read the original post: CCleaner Backdoor Attack: A State-sponsored Espionage Campaign...

Iranian APT33 Targets U.S. Firms with Destructive Malware

The Iranian group known as APT33 is believed to be behind a cyberespionage campaign targeting aerospace, petrochemical and energy sector firms located in the United States, Saudi Arabia and South Korea. The group’s latest attack leverages a dropper called DropShot that is tied to the StoneDrill...

CCleaner Malware Infects Big Tech Companies With Second Backdoor

The group of unknown hackers who hijacked CCleaner's download server to distribute a malicious version of the popular system optimization software targeted at least 20 major international technology companies with a second-stage payload. Earlier this week, when the CCleaner hack was reported,...

CCleaner Command and Control Causes Concern

This post was authored by Edmund Brumaghin, Earl Carter, Warren Mercer, Matthew Molyett, Matthew Olney, Paul Rascagneres and Craig Williams.Note: This blog post discusses active research by Talos into a new threat. This information should be considered preliminary and will be updated as research...

WordPress Display Widgets Plugin Spammers Backdoor

A backdoor vulnerability exists in WordPress Display Widgets Plugin. Successful exploitation of this vulnerability allows remote attackers to change the effected site's content...

Moxa AWK-3131A Hard-coded Administrator Credentials Vulnerability(CVE-2016-8717)

Summary An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged root account with hard-coded credentials, giving attackers full control of affected devices...

Tecnovision DLX Spot - SSH Backdoor Vulnerability

Exploit for multiple platform in category remote exploits Exploit Title: DlxSpot - Player4 LED video wall - Hardcoded Root SSH Password. Google Dork: "DlxSpot - Player4" Date: 2017-05-14 Discoverer: Simon Brannstrom Authors Website: https://unknownpwn.github.io/ Vendor Homepage:...

CCleaner 'CCleaner.exe' Backdoor Trojan Vulnerability - Windows

CCleaner is prone to backdoor trojan installation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CCleaner Cloud 'CCleaner.exe' Backdoor Trojan Vulnerability - Windows

CCleaner Cloud agent is prone to backdoor trojan installation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CCleaner Software Hacked with Backdoor; 2 Million Users Infected

By Waqas Hackers have illegally modified Avast-owned CCleaner by establishing a backdoor This is a post from HackRead.com Read the original post: CCleaner Software Hacked with Backdoor; 2 Million Users Infected...

Piriform CCleaner 5.33.6162 Backdoor

The version of Piriform CCleaner installed on the remote Windows host is equal to 5.33.6162. It is, therefore, affected by a malicious backdoor in CCleaner.exe that allows remote attackers to obtain sensitive information and install unauthorized software. C Tenable Network Security, Inc...

Piriform CCleaner Cloud 1.07.3191 Backdoor

The version of Piriform CCleaner Cloud installed on the remote Windows host is equal to 1.07.3191. It is, therefore, affected by a malicious backdoor that allows remote attackers to obtain sensitive information and install unauthorized software. C Tenable Network Security, Inc. include"compat.inc...

KLA11105 A vulnerability in CCleaner and CCleaner Cloud

A vulnerability was found in CCleaner and CCleaner Cloud. This vulnerability can be exploited remotely to obtain sensitive information or execute arbitrary code. Technical details An unauthorized modification of the CCleaner.exe binary resulted in an insertion of a two-stage backdoor capable of...

CVE-2017-10845

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

CVE-2017-10845

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

Design/Logic Flaw

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

CVE-2017-10845

CVE-2017-10845 corresponds to a backdoor access issue in NTT DOCOMO Wi‑Fi STATION L-02F firmware (V10g and earlier). Multiple connected records confirm an unauthenticated remote attacker can gain administrative privileges and perform unintended operations via a backdoor account. The vulnerability...