1291 matches found
Cobalt Strike Beacon Suspicious Communication
Cobalt Strike is a software for adversary simulations. Beacon is the payload of the Cobalt Strike framework, and it is injected into the target's memory. An attacker could use Beacon for remote code execution on a target machine...
Year-Old Coldroot RAT Targets MacOS, Still Evades Detection
Researchers are warning users about the Coldroot remote access Trojan that is going undetected by AV engines and targets MacOS computers. The RAT is cross-platform and capable of planting a keylogger on MacOS systems prior to the OS High Sierra and is designed to steal banking credentials. Coldro...
PiDense - Monitor Illegal Wireless Network Activities (Fake Access Points)
Monitor illegal wireless network activities. Similar SSID broadcasts Same SSID broadcasts Calculates unencrypted wireless networks density Watches SSID broadcasts at the blacklist. Capabilities Now Calculates Unencrypted wireless network density Finds same ssid, different encryption Working...
careerbeacon.com XSS vulnerability
Open Bug Bounty ID: OBB-500563 Description| Value ---|--- Affected Website:| careerbeacon.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
SUSE-SU-2017:3381-1 Security update for Salt
This update for salt fixes one security issue and bugs. The following security issues have been fixed: - CVE-2017-14695: A directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. bsc1062462 -...
SUSE-SU-2017:3380-1 Security update for Salt
This update for salt fixes one security issue and bugs. The following security issues have been fixed: - CVE-2017-14695: A directory traversal vulnerability in minion id validation allowed remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. bsc1062462 -...
macphish - Office for Mac Macro Payload Generator
Office for Mac Macro Payload Generator. Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload will...
Office for Mac Macro Payload Generator: MacPhish
Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the ‘creds’ method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload will signal our listening host and provide basi...
Technicolor TC8717T Device Time Warner Firmware Unauthorized Access Vulnerability
Technicolor TC8717T devices is a router from the French company Technicolor.Time Warner is the firmware that runs on it. A security vulnerability exists in the Time Warner firmware on Technicolor TC8717T devices. A remote attacker could exploit the vulnerability to gain network access by reading...
CVE-2017-9522
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
Design/Logic Flaw
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
CVE-2017-9522
The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for remote attackers to obtain network access by reading a beacon frame...
CVE-2017-6885
An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges...
CVE-2017-6885
CVE-2017-6885 affects Flexera Software FlexNet Manager Suite (FlexNet Inventory Agent and FlexNet Beacon); vulnerable versions include 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1. Cause: an error in handling certain external commands and services that can be exploited to gain elevated pri...
CVE-2017-6885
An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Software FlexNet Manager Suite 2017 before 2017 R1 and 2014 R3 through 2016 R1 SP1 can be exploited to gain elevated privileges...
WikiLeaks Reveals Two CIA Malware Frameworks
WikiLeaks released details on what it claims are two frameworks for malware samples dubbed AfterMindnight and Assassin, both allegedly developed by the U.S. Central Intelligence Agency. The revelations come amid worldwide efforts to squelch variants of the WannaCry ransomware, an offensive hackin...
WikiLeaks Reveals CIA Tool 'Scribbles' For Document Tracking
Update WikiLeaks released details on what it said is a Central Intelligence Agency document tracking program called Scribbles, part of the agency’s effort to keep tabs on documents leaked to whistleblowers and journalists. Scribbles allegedly embeds a web beacon-style tag into watermarks located ...
Source Code for CIA’s Tool to Track Whistleblowers Leaked by Wikileaks
Wikileaks has just published a new batch of the Vault 7 leak, exposing the documentation and source code for a CIA project known as "Scribbles." Scribbles, a.k.a. the "Snowden Stopper," is a piece of software allegedly designed to embed 'web beacon' tags into confidential documents, allowing the...
chepstowbeacon.co.uk XSS vulnerability
Vulnerable URL: http://www.chepstowbeacon.co.uk/search.cfm?sectionIs=search=LocalNews=2011="--!"= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5031297 VIP website status:| No...
