2447 matches found
CVE-2021-26918
The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the "Send an image when a user joins the server" feature or possibly have unspecified other impact because the uploader web service allows double extensions such as .html.jpg with the...
Discord Probot Arbitrary File Upload
Exploit Title: Discord Probot - Unrestricted File Upload Google Dork: N/A Date: 2021-02-08 Exploit Author: ThelastVvV Vendor Homepage:probot.io Version:Version 2021 Tested on: Debian 5.7.10-1parrot2 CVE:CVE-2021-26918 About: Probot is a discord very customizable multipurpose bot for welcome image...
API Security Checks in the Post-Pandemic World
The digital transformation journeys of many enterprises have been accelerated by the COVID-19 pandemic. For 2020, IT resources shifted to support WFH policies with mobile and remote productivity solutions, while simultaneously managing multiple datacenter migration projects to the cloud for scale...
TeamTNT Cloaks Malware With Open-Source Tool
The TeamTNT threat group has added a new detection-evasion tool to its arsenal, helping its cryptomining malware skirt by defense teams. The TeamTNT cybercrime group is known for cloud-based attacks, including targeting Amazon Web Services AWS credentials in order to break into the cloud and use ...
Targeted Phishing Attacks Strike High-Ranking Company Executives
An evolving phishing campaign observed at least since May 2020 has been found to target high-ranking company executives across manufacturing, real estate, finance, government, and technological sectors with the goal of obtaining sensitive information. The campaign hinges on a social engineering...
The vulnerability of the Bot Framework SDK, related to the lack of protection for service data, allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Bot Framework SDK is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Malicious Package
Overview From https://blog.sonatype.com/sonatype-spots-more-discord-malware-in-npm?hspreview=BbDPGbfh-40737456755: The malicious packages were detected by Sonatype’s Security Research Team leveraging Sonatype’s Nexus Intelligence research service. On analyzing these packages closely, our Security...
Malicious Package
Overview From https://blog.sonatype.com/sonatype-spots-more-discord-malware-in-npm?hspreview=BbDPGbfh-40737456755: The malicious packages were detected by Sonatype’s Security Research Team leveraging Sonatype’s Nexus Intelligence research service. On analyzing these packages closely, our Security...
Malicious Package
Overview From https://blog.sonatype.com/sonatype-spots-more-discord-malware-in-npm?hspreview=BbDPGbfh-40737456755: The malicious packages were detected by Sonatype’s Security Research Team leveraging Sonatype’s Nexus Intelligence research service. On analyzing these packages closely, our Security...
CVE-2021-1725
Bot Framework SDK Information Disclosure Vulnerability...
CVE-2021-1725
Bot Framework SDK Information Disclosure Vulnerability...
Information disclosure
Bot Framework SDK Information Disclosure Vulnerability...
CVE-2021-1725
Bot Framework SDK Information Disclosure Vulnerability...
PYSEC-2021-422
Bot Framework SDK Information Disclosure Vulnerability...
PYSEC-2021-422
Bot Framework SDK Information Disclosure Vulnerability...
CVE-2021-1725 Bot Framework SDK Information Disclosure Vulnerability
...
CVE-2021-1725
CVE-2021-1725 corresponds to a Bot Framework SDK Information Disclosure vulnerability. Connected sources show the issue in the Bot Framework’s botframework-connector component, where a malicious claim could be incorrectly authenticated when bots are not configured as a Skill. The root cause invol...
Bot Framework SDK Information Disclosure Vulnerability
...
Microsoft Bot Framework Information Disclosure Vulnerability
Microsoft Bot Framework is a development framework for building intelligent bot applications from Microsoft USA. The framework supports bots to seamlessly connect to text/messaging, Office 365 email, Skype, Slack and other services. An information disclosure vulnerability exists in the Microsoft...
PT-2021-1610 · Microsoft · Bot Framework Sdk
Name of the Vulnerable Software and Affected Versions: Bot Framework SDK versions prior to the fixed version Description: The vulnerability is related to the lack of protection of service data in the Bot Framework SDK. It may allow a remote attacker to gain unauthorized access to protected...