New Magecart Attack Uses 404 Errors to Steal Your Card Data

By Deeba Ahmed Be cautious of scammers employing a new and convincing trick to steal your payment card data through a Magecart attack. This is a post from HackRead.com Read the original post: New Magecart Attack Uses 404 Errors to Steal Your Card Data...

Information Disclosure

mediawiki is vulnerable to Information Disclosure. The vulnerability allows an attacker to inject arbitrary code into a web page, potentially allowing them to steal user data...

The Art of Concealment: A New Magecart Campaign That’s Abusing 404 Pages

...

BunnyLoader: The New Malware-as-a-Service Threat

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary BunnyLoader is a Malware-as-a-Service threat, boasting advanced features like anti-sandbox techniques, keylogging, stealing data, cryptocurrency wallets, and remote command execution, posing risks to...

Shuttle-Booking-Software v1.0 - Multiple-SQLi

Title: Shuttle-Booking-Software v1.0 - Multiple-SQLi Author: nu11secur1ty Date: 09/10/2023 Vendor: https://www.phpjabbers.com/ Software: https://www.phpjabbers.com/shuttle-booking-software/sectionPricing Reference: https://portswigger.net/web-security/sql-injection Description: The locationid...

SuiteCRM SQL Injection Vulnerability (CNVD-2023-98210)

SuiteCRM is a customer relationship management system from the SuiteCRM team. An SQL injection vulnerability exists in SuiteCRM versions prior to 7.14.1 that stems from duplicateparentid not being properly validated and cleaned. An attacker can exploit this vulnerability to execute illegal SQL...

Over 3 Dozen Data-Stealing Malicious npm Packages Found Targeting Developers

Nearly three dozen counterfeit packages have been discovered in the npm package repository that are designed to exfiltrate sensitive data from developer systems, according to findings from Fortinet FortiGuard Labs. One set of packages – named @expue/webpack, @expue/core, @expue/vue3-renderer,...

SuiteCRM SQL注入漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. An SQL injection vulnerability exists in SuiteCRM versions prior to 7.14.1 that stems from duplicateparentid not being properly validated and cleaned. An attacker can exploit this vulnerability to execute illegal SQL...

FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data

By Waqas There are over 17 million developers worldwide who use NPM packages, making it a lucrative target for cybercriminals. This is a post from HackRead.com Read the original post: FortiGuard Labs Uncovers Series of Malicious NPM Packages Stealing Data...

Remote Code Execution (RCE)

libspf2 is vulnerable to Remote Code Execution RCE. The vulnerability could allow an attacker to execute arbitrary code on the Exim server, potentially allowing them to take control of the system or steal sensitive data...

Untrusted Search Path

vim is vulnerable to Untrusted Search Path. An attacker could exploit this vulnerability by tricking a user into opening a malicious file or by sending a specially crafted HTTP request to a vulnerable Vim server due to the way Vim searches for files. Once the vulnerability is exploited, the...

Heap-based Buffer Overflow

vim is vulnerable to Heap-based Buffer Overflow. An attacker could exploit this vulnerability by tricking a user into opening a malicious file or by sending a specially crafted HTTP request to a vulnerable Vim server. Once the vulnerability is exploited, the attacker could take control of the...

Use After Free

vim is vulnerable to Use After Free. An attacker could exploit this vulnerability by tricking a user into opening a malicious file or by sending a specially crafted HTTP request to a vulnerable Vim server. Once the vulnerability is exploited, the attacker could take control of the user's system a...

Use After Free

vim is vulnerable to Use After Free. An attacker could exploit this vulnerability by tricking a user into opening a malicious file or by sending a specially crafted HTTP request to a vulnerable Vim server. Once the vulnerability is exploited, the attacker could take control of the user's system a...

Denial Of Service (DoS)

bind is vulnerable to Denial of Service DoS. An attacker could exploit this vulnerability by sending a malicious DNS packet to a vulnerable named server. Once the vulnerability is exploited, the attacker could take control of the server and steal data, install malware, or disrupt service...

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud

LUCR-3 overlaps with groups such as Scattered Spider, Oktapus, UNC3944, and STORM-0875 and is a financially motivated attacker that leverages the Identity Provider IDP as initial access into an environment with the goal of stealing Intellectual Property IP for extortion. LUCR-3 targets Fortune 20...

PT-2023-29168 · Fooplugins · Foogallery

Name of the Vulnerable Software and Affected Versions: FooPlugins FooGallery plugin versions = 2.2.44 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing the...

PT-2023-28050 · Unknown · Hennessey Digital Attorney

Name of the Vulnerable Software and Affected Versions: Hennessey Digital Attorney theme versions = 3 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into the website, potentially allowing th...

FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies

The U.S. Federal Bureau of Investigation FBI is warning of a new trend of dual ransomware attacks targeting the same victims, at least since July 2023. "During these attacks, cyber threat actors deployed two different ransomware variants against victim companies from the following variants:...

Cybercriminals Using New ASMCrypt Malware Loader to Fly Under the Radar

Threat actors are selling a new crypter and loader called ASMCrypt, which has been described as an "evolved version" of another loader malware known as DoubleFinger. "The idea behind this type of malware is to load the final payload without the loading process or the payload itself being detected...