GC2 - A Command And Control Application That Allows An Attacker To Execute Commands On The Target Machine Using Google Sheet And Exfiltrate Data Using Google Drive

GC2 Google Command and Control is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet and exfiltrates data using Google Drive. Why This program has been developed in order to provide a command and control that does not require any...

From Technical Features to Customer Security Metrics

Qualys solutions are packed with great functionality to deliver operational efficiency to all our customers, but the value does not end with bits and bytes. Qualys customers can count on Technical Account Managers to maximize the effectiveness of their subscription, and this post tells a story...

USN-5073-2: Linux kernel (GCP) vulnerabilities

Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write portions of the host's physical memory...

Doodle Smart app and Doodle Converter (smart socket) have a flawed logic vulnerability

Doodle Smart is an IoT cloud platform that connects brands, OEMs, developers and chain retailers with their intelligence needs, providing a one-stop AI IoT PaaS-level solution that covers hardware development, global cloud, and smart business platform development, providing comprehensive ecologic...

Netskope Client 安全漏洞

Netskope Client is a client program from Netskope USA for connecting to manage the Netskope Cloud Platform. A security vulnerability exists in Netskope Client that allows low-privileged users to elevate their privileges to NT AUTHORITYSYSTEM...

Unauthorized Access Vulnerability in Ovia's Instructional Video Application Cloud Platform

Ltd. is a high-tech enterprise focusing on the research and development, production, sales and service of education informatization products. Guangzhou Aoweiya Electronic Technology Co., Ltd. campus video application cloud platform has unauthorized access vulnerability, attackers can use the...

Arbitrary File Download Vulnerability in Taibo Cloud Platform of Xiamen Taibo Technology Co.

TabTech Ltd. is a software company focusing on the informationization of senior universities. Xiamen Taibo Technology Co., Ltd. Taibo Cloud Platform has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

XSS Vulnerability in the Transportation Management Cloud Platform of Shanghai BuBuYiBai Technology Co.

Ltd. is a high-tech enterprise providing information system for domestic small and medium-sized logistics. Shanghai BBYB Technology Co., Ltd. has an XSS vulnerability in its transportation management cloud platform, which can be exploited by attackers to obtain sensitive information such as user...

Weak Password Vulnerability in Intelligent Firefighting Cloud Platform of Suzhou State Grid Electronic Technology Co.

GNT is an IoT+ management solution provider. A weak password vulnerability exists in the Intelligent Firefighting Cloud Platform of Suzhou Guonet Electronic Technology Co. Ltd. where an attacker utilizes a weak password to log into the backend and obtain sensitive information...

Information Leakage Vulnerabilities in the Education Cloud Platform of Beijing Zhongqing Nabo Information Technology Co.

Beijing Zhongqing Nabo Information Technology Co., Ltd. is a core enterprise of Zhongqing Group and one of the pioneering enterprises in the field of education information technology in China. An information leakage vulnerability exists in the education cloud platform of Beijing Zhongqing Nabo...

Logic flaws exist in the management informationization practical training cloud platform of Changjie Tong Information Technology Co.

Stock Code: 1588.HK is a member company of UFIDA. Changjitong is committed to providing social, personalized, service-oriented and small business management support for small and medium-sized enterprises SMEs. A logic flaw vulnerability exists in the management informationization practical traini...

SQL Injection Vulnerability in the Joint Exam Version of Xi'an Runge Electronic Technology Co.

The business scope of Xi'an Runge Electronic Technology Co., Ltd. includes: sales of electronic products, computer software and hardware; computer software, electronic products and so on. Xi'an Runge Electronic Technology Co., Ltd. marking cloud platform joint examination version of the SQL...

GDir-Thief - Red Team Tool For Exfiltrating The Target Organization'S Google People Directory That You Have Access To, Via Google's API

Red Team tool for exfiltrating the target organization's Google People Directory that you have access to, via Google's People API. HOW TO Create a new Google Cloud Platform GCP project Steps to get the Google API Access Token needed for connecting to the API 1. Create a burner gmail/google accoun...

Google Cloud Platform Settings

Binary data gcpsettings.nbin...

Google Cloud Platform Compliance Checks

Binary data gcpcompliancecheck.nbin...

Unpatched Virtual Machine Takeover Bug Affects Google Compute Engine

An unpatched security vulnerability affecting Google's Compute Engine platform could be abused by an attacker to take over virtual machines over the network. "This is done by impersonating the metadata server from the targeted virtual machine's point of view," security researcher Imre Rad said in...

Weak password vulnerability of EasyGBS of Anhui Xufan Information Technology Co.

EasyGBS is a national standard video cloud platform developed by Anhui Xufan Information Technology Co. Anhui Xufan Information Technology Co., Ltd EasyGBS has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in Xiamen Phoenix Chuangyi Software Ltd.'s Chuangyi 100VR Visualization Intelligent Interactive Teaching Cloud Platform

The business scope of Xiamen Phoenix Chuangyi Software Co., Ltd. includes: software development; Internet information services; book publishing; newspaper publishing, and so on. Xiamen Phoenix Chuangyi Software Co., Ltd Chuangyi 100VR visualization intelligent interactive teaching cloud platform...

SQL Injection Vulnerability in Property Integrated Billing Management Cloud Platform of Shenzhen Zhongdian Electric Power Technology Co.

Property integrated billing management system is based on cloud computing, Internet of Things and advanced intelligent billing management technology, realizes flexible access of intelligent power consumption data of electric power system and data of other intelligent terminals, supports...

Weak Password Vulnerability in Beidou Active Security Cloud Platform

Founded in March 2012, Hunan Changshang Technology Co., Ltd. is a high-tech enterprise integrating R&D, manufacturing, sales and service of electronic technology and its related products. There is a weak password vulnerability in Beidou Active Security Cloud Platform, which can be exploited by...