Well-known terminal simulation software, XSHELL, multiple versions exist the back door, or to upload user Server account password-loophole warning-the black bar safety net

Xshell is a powerful,famous terminal simulation software, is widely used for server operations and management,Xshell supports SSH, SFTP, TELNET, RLOGIN and SERIAL functions. It offers industry-leading performance and powerful function, in the free terminal emulation software has an irreplaceable...

Popular remote terminal management tool Xshell is implanted in the back door code, could lead to sensitive information disclosure-vulnerability warning-the black bar safety net

Recently, a very popular remote terminal Xshell is found to be implanted back door code, if the user using the Troy of the Xshell tool version may lead to sensitive information being leaked to the attacker the control of the machine. Xshell particular Build 1322 on the domestic use of the surface...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Android Remote Administration Tool: AhMyth

Android Remote Administration Tool AhMyth consists of two parts : Server side : desktop application based on electron framework control panel Client side : android application backdoor Getting Started From source code Prerequisite : Electron to start the app Java to generate apk backdoor...

Dahua IoT Devices Backdoor Unauthorized Access

An Unauthorized Access Vulnerability exists in Dahua devices. Successful exploitation of this vulnerability could allow a remote attacker to gain administrator level access on the affected device...

Two Popular IP Cameras Riddled With Vulnerabilities

Two consumer-grade IP-enabled security cameras manufactured by Loftek and VStartcam are riddled with nearly two dozen vulnerabilities that expose them to remote attacks. According to researchers, more than 1.3 million of the cameras are in use today, with 200,000 models located in the United...

CowerSnail — Windows Backdoor from the Creators of SambaCry Linux Malware

Last month, we reported about a group of hackers exploiting SambaCry—a 7-year-old critical remote code execution vulnerability in Samba networking software—to hack Linux computers and install malware to mine cryptocurrencies. The same group of hackers is now targeting Windows machines with a new...

CowerSnail Backdoor Targeting Windows Devices

By Waqas Kaspersky Lab has identified the presence of a backdoor designed This is a post from HackRead.com Read the original post: CowerSnail Backdoor Targeting Windows Devices...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Inmarsat AmosConnect8 Mail Client Vulnerable to SQL Injection and Backdoor Account

Overview Inmarsat Solutions offers a shipboard email client service, AmosConnect 8 AC8, which was designed to be utilized over satellite networks in a highly optimized manner. IOActive has identified two security vulnerabilities in the client software: On-board ship network access could provide...

Code injection

D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection...

CVE-2017-11436

D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection...

CVE-2017-11436

D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which might allow remote attackers to obtain access via a TELNET connection...

CVE-2017-11436

CVE-2017-11436 affects the D-Link DIR-615 router (pre-20.12PTb04) with a second admin account containing a 0x1 BACKDOOR value, which could allow remote attackers to gain administrator access via TELNET. The vulnerability is documented across multiple sources (NVD/CNVD) with impact described as re...

New Linux Malware Exploits SambaCry Flaw to Silently Backdoor NAS Devices

Remember SambaCry? Almost two months ago, we reported about a 7-year-old critical remote code execution vulnerability in Samba networking software, allowing a hacker to remotely take full control of a vulnerable Linux and Unix machines. We dubbed the vulnerability as SambaCry, because of its...

GSA Bounty: The Federalsit session cookie (federalist.sid) is not properly invalidated - backdoor access to the account is possible

Description Hello. This issue is not very dangerous itself, but can be dangerous in combination of others like XSS, or malicious access to the user account. The user/attacker, who got once valid cookie federalist.sid from the account, can use it as backdoor for some time, because it is not actual...

AhMyth Android RAT - Android Remote Administration Tool

AhMyth Android RAT is an Android Remote Administration Tool Beta Version It consists of two parts: Server side: desktop application based on electron framework control panel Client side: Android application backdoor Getting Started From source code Prerequisite : Electron to start the app Java to...

WMI Event Subscription Persistence Exploit

This Metasploit module will create a permanent WMI event subscription to achieve file-less persistence using one of five methods. This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell'...

GShark Framework - Check all your backdoors with only one telegram account

This framework can perform web post exploitation, with this you can interact with multiple web backdoor and execute custom module, script. Check all your backdoors with only one telegram messenger account! Connect web backdoor to master server and control it with Telegram Download visual backdoor...

WP Statistics Authenticated XSS Vulnerability

A few days ago the awesome folks over at Sucuri found a SQL Injection vulnerability in the popular WP Statistics WordPress Plugin, currently installed on over 300,000 websites. We wanted to check our existing toolsets would have detected the vulnerability so that we could ensure that Dewhurst...