CVE-2022-47490

creationtimestamp| type| source ---|---|--- 2023-05-09 07:38:09+00:00| seen| https://t.me/cibsecurity/63533...

CVE-2023-20957

creationtimestamp| type| source ---|---|--- 2023-03-24 23:48:00+00:00| seen| https://t.me/cibsecurity/60699...

CVE-2023-27981

creationtimestamp| type| source ---|---|--- 2023-03-21 13:34:51+00:00| seen| https://t.me/cibsecurity/60360...

Malicious Package

Overview tanker-branch is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

WordPress Plugins Detected

This is an informational notice that the scanner was able to detect one or more installed WordPress plugins. No source data...

Wiz integrates with AWS Security Hub to help you better manage your AWS security posture

New integration enables AWS customers to send Wiz security issues detected in AWS resources to Security Hub...

World’s Leading Copper Producer Aurubis Suffers Crippling Cyberattack

By Deeba Ahmed According to a statement from the Germany-based Aurubis, the attack was detected on the night of October 28th. This is a post from HackRead.com Read the original post: Worlds Leading Copper Producer Aurubis Suffers Crippling Cyberattack...

DotNetNuke Administration Panel Login Form Detected

DotNetNuke Administration Panel login has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative...

TYPO3 Administration Panel Login Form Detected

TYPO3 Administration Panel has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No sour...

PT-2022-14862 · Undefined · Undefined

ParsedReport 01-10-2022 Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082 https://www.microsoft.com/security/blog/2022/09/30/analyzing-attacks-using-the-exchange-vulnerabilities-cve-2022-41040-and-cve-2022-41082 Threats: Chinachopper Backdoor:win32/rewritehttp...

SuiteCRM authenticated SQL injection in export functionality

This module exploits an authenticated SQL injection in SuiteCRM in versions before 7.12.6. The vulnerability allows an authenticated attacker to send specially crafted requests to the export entry point of the application in order to retrieve all the usernames and their associated password from t...

A Post-exploitation Look at Coinminers Abusing WebLogic Vulnerabilities

This blog entry details how Trend Micro Cloud One™ – Workload Security and Trend Micro Vision One™ effectively detected and blocked the abuse of the CVE-2020-14882 WebLogic vulnerability in affected endpoints...

PVS Streamprocess: Login failed (error code: 4) for device <devicename>

Target devices are stuck at booting: Application event log is flooded with StreamProcess Event ID 10 that reads: "Login failed error code: 4 for device targetdevice1: No servers available for disk" Application event log will also have Streamprocess event ID 11's which read: "Detected one or more...

July 2022 Patch Tuesday | Microsoft Releases 84 Vulnerabilities with 4 Critical, plus 2 Microsoft Edge (Chromium-Based); Adobe Releases 4 Advisories, 27 Vulnerabilities with 18 Critical.

Microsoft Patch Tuesday Summary Microsoft has fixed 84 vulnerabilities aka flaws in the July 2022 update, including four 4 vulnerabilities classified as Critical as they allow Remote Code Execution RCE. This months Patch Tuesday cumulative Windows update includes the fix for one 1 actively...

Malicious code in hello-oauth-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b3dba086e4539ba830b04b5d911a532cb91957fd5cbdf6a5e6793e6d1953d72 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in frontend-framework-paypal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3249f5205a1b92d8e4fa170c1209732d6d43bcf2a5b6681aa3176e38a4c358cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2944 Malicious code in extraneous-detected (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c37443660cc0f4d7112c362734a5370d76c45d1444f9ae76efbac3b4bbed71e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-web-pubsub-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 766daa3f07414b1bad6a9340c3da5588cf93101c538a644c3ed06da3c3b978d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

June 2022 Patch Tuesday | Microsoft Releases 55 Vulnerabilities with 3 Critical; Adobe Releases 6 Advisories, 46 Vulnerabilities with 40 Critical.

Microsoft Patch Tuesday Summary Microsoft has fixed 55 vulnerabilities aka flaws in the June 2022 update, including three 3 vulnerabilities classified as Critical as they allow Remote Code Execution RCE. This months Patch Tuesday cumulative Windows update includes the fix for one 1 zero-day...

TIBCO BusinessConnect Trading Community Management 跨站脚本漏洞

Tibco TIBCO BusinessConnect Trading Community Management is a trading community management from Tibco USA. A cross-site scripting vulnerability exists in TIBCO BusinessConnect Trading Community Management 6.1.0 and prior versions, which can be exploited by an unauthenticated attacker with network...