Lucene search
K

31235 matches found

Securelist
Securelist
added 2023/10/23 11:0 a.m.37 views

The outstanding stealth of Operation Triangulation

Introduction In our previous blogpost on Triangulation, we discussed the details of TriangleDB, the main implant used in this campaign, its C2 protocol and the commands it can receive. We mentioned, among other things, that it is able to execute additional modules. We also mentioned that this...

7.4AI score
Exploits0
CNNVD
CNNVD
added 2023/10/23 12:0 a.m.4 views

Zscaler Client Connector Data Forgery Issue Vulnerability

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A...

8.2CVSS6.7AI score0.00242EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.16 views

Jira Server/Data Center STAGIL Navigation plugin Path Traversal CVE-2023-26256

Binary data jiraCVE-2023-26256.nbin...

7.5CVSS7.5AI score0.11615EPSS
Exploits7References2
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.20 views

SentinelOne Agent Installed (Windows)

Binary data sentineloneagentwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/23 12:0 a.m.20 views

Jira Server/Data Center STAGIL Navigation plugin Path Traversal CVE-2023-26255

Binary data jiraCVE-2023-26255.nbin...

7.5CVSS7.5AI score0.47907EPSS
Exploits5References2
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.49 views

D-Link D-View 8 Hard-coded JWT Key (CVE-2023-5074)

Binary data dlinkdview8staticjwtkey.nbin...

9.8CVSS9.6AI score0.67914EPSS
Exploits1References4
Tenable Nessus
Tenable Nessus
added 2023/10/20 12:0 a.m.14 views

D-Link D-View 8 Web Server Detection

Binary data dlinkdview8webserverdetect.nbin...

7.3AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/10/19 10:15 a.m.2 views

CVE-2022-26941

A format string vulnerability exists in Motorola MTM5000 series firmware AT command handler for the AT+CTGL command. An attacker-controllable string is improperly handled, allowing for a write-anything-anywhere scenario. This can be leveraged to obtain arbitrary code execution inside the tedsapp...

9.6CVSS6.4AI score0.00327EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/10/19 12:0 a.m.3 views

Motorola MTM5000 Formatting String Error Vulnerability

The Motorola MTM5000 is a mobile radio from Motorola, USA. A security vulnerability exists in the Motorola MTM5000 that stems from a format string vulnerability in the AT+CTGL command in the command handler, which results in a write-anywhere scenario that can be exploited to obtain arbitrary code...

9.6CVSS7.9AI score0.00327EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/18 12:0 a.m.75 views

Cisco IOS XE CVE-2023-20198 Implant Indicator of Compromise

Binary data ciscoiosxeimplantCVE-2023-20198.nbin...

10CVSS8.7AI score0.99571EPSS
Exploits27References4
Tenable Nessus
Tenable Nessus
added 2023/10/18 12:0 a.m.9 views

ImageMagick Installed (macOS)

Binary data imagemagickmacosinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/17 12:0 a.m.24 views

LG LED Assistant Path Traversal (CVE-2023-4613)

Binary data lgledassistantcve-2023-4613.nbin...

9.8CVSS9.7AI score0.02182EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2023/10/17 12:0 a.m.22 views

LG LED Assistant Detection

Binary data lgledassistantdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/17 12:0 a.m.8 views

Trellix Enterprise Security Manager Web Interface Detection

Binary data enterprisesecuritymanagerdetect.nbin...

7.3AI score
Exploits0References1
GoogleProjectZero
GoogleProjectZero
added 2023/10/13 12:0 a.m.80 views

An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit

By Ian Beer A graph representation of the sandbox escape NSExpression payload In April this year Google's Threat Analysis Group, in collaboration with Amnesty International, discovered an in-the-wild iPhone zero-day exploit chain being used in targeted attacks delivered via malicious link. The...

8.8CVSS8.9AI score0.27076EPSS
Exploits0
CNVD
CNVD
added 2023/10/12 12:0 a.m.67 views

Binary vulnerability in Linux kernel (CNVD-2023-87918)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a binary vulnerability that can be exploited by attackers to cause a system crash or local elevation of privilege...

7CVSS6.3AI score0.00536EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2023/10/12 12:0 a.m.17 views

Apple iOS < 16.7.1 Multiple Vulnerabilities (HT213972)

Binary data appleios1671check.nbin...

8.8CVSS7.3AI score0.34401EPSS
Exploits3References3
Tenable Nessus
Tenable Nessus
added 2023/10/12 12:0 a.m.15 views

Microsoft Identity Linux Broker Installed (Linux)

Binary data microsoftidentitybrokernixinstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/12 12:0 a.m.11 views

libcurl Installed (Windows)

Binary data libcurlwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/10/12 12:0 a.m.59 views

Microsoft Windows Server 2012 / 2012 R2 ESU Status Check

Binary data wmiwin2012esustatus.nbin...

7.3AI score
Exploits0References1
Rows per page
Query Builder