1375 matches found
PT-2023-24138 · Qualcomm · Qualcomm Snapdragon Chipsets
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Chipsets affected versions not specified Description: The issue is related to a Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. There is no information provided about the estimated...
China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons
An ongoing cyber attack campaign originating from China is targeting the Southeast Asian gambling sector to deploy Cobalt Strike beacons on compromised systems. Cybersecurity firm SentinelOne said the tactics, techniques, and procedures point to the involvement of a threat actor tracked as Bronze...
PT-2023-9277 · Qualcomm · Qualcomm Embedded Platform
Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to disclose protected information or cause a denial of service...
PicassoLoader Malware Used in Ongoing Attacks on Ukraine and Poland
Government entities, military organizations, and civilian users in Ukraine and Poland have been targeted as part of a series of campaigns designed to steal sensitive data and gain persistent remote access to the infected systems. The intrusion set, which stretches from April 2022 to July 2023,...
BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising
Threat actors associated with the BlackCat ransomware have been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer application. "Malicious actors used malvertising to distribute a piece of malware via cloned webpages of legitimate organizations," Tre...
BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising
Threat actors associated with the BlackCat ransomware have been observed employing malvertising tricks to distribute rogue installers of the WinSCP file transfer application. "Malicious actors used malvertising to distribute a piece of malware via cloned webpages of legitimate organizations," Tre...
beaconbikes.co.uk Cross Site Scripting vulnerability OBB-3475837
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data
A previously undocumented Windows-based information stealer called ThirdEye has been discovered in the wild with capabilities to harvest sensitive data from infected hosts. Fortinet FortiGuard Labs, which made the discovery, said it found the malware in an executable that masqueraded as a PDF fil...
NodeOperator will steal other NodeOperators' validators through frontrunning
Lines of code Vulnerability details Impact People that want to earn staking rewards, but do not have the resources to run validators, will see Stader as an avenue where they can easily steal and use others validators and they will actually earn Operator rewards from Stader. This could lead to two...
The increaseTotalValidatorActiveCount in PermissionedPool incorrectly adds requiredValidators instead of validatorToDeposit
Lines of code Vulnerability details Impact When the Stader Stake Pools Manager calls stakeUserETHToBeacon chain, it does so calculating the requiredValidators that can be added to the pool. The function internally also uses the allocateValidatorsAndUpdaterOperatorId to compute each operator's...
CVE-2023-21661
Transient DOS while parsing WLAN beacon or probe-response frame...
Design/Logic Flaw
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...
CVE-2023-21661
Technical details about CVE-2023-21661, including affected products, versions, and fixes, are not provided in the supplied documents. Monitor for updates in linked bulletins.
CVE-2023-21658
CVE-2023-21658 is a reported transient Denial of Service affecting WLAN firmware, triggered while processing received beacon or probe response frames. The CVE is characterized in sources as a WLAN firmware issue with an underlying buffer over-read leading to DoS. Affected/related disclosures refe...
CVE-2023-21658 Buffer Over-Read in WLAN Firmware
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...
CVE-2023-21658 Buffer Over-Read in WLAN Firmware
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame...
PT-2023-18321 · Unknown · Wlan Firmware
Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the WLAN Firmware. It occurs while processing received beacon or probe response frames. Recommendations: At the moment,...
PT-2023-18324 · Qualcomm · Snapdragon +120
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A transient Denial of Service DOS can occur while parsing WLAN beacon or probe-response frames. Recommendations: At the moment, there is no information about a newer version that...
Qualcomm Chipsets 缓冲区错误漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a denial of service in the WLAN firmware when processing received beacons or probe response frames...
