DocPlz

DocPlz 用于娱乐和教育目的的文档外泄项目 https://github.com/TheD1rkMtr/DocPlz/assets/123980007/8026985e-e285-4a76-a1d7-f4c0fa3ad240...

CVE-2026-63563

CVE-2026-63563 - Sharp MX/BP 다기능 프린터의 인증 없는 주소록 변조 공급업체 권고: Sharp 제품 보안 권고 2026-004 2026년 7월 31일 게시 요약 Sharp MX/BP 시리즈 다기능 프린터는 기본 구성에서 장치 웹 인터페이스를 통해 인증 없이 주소록을 노출합니다. 원격의 인증되지 않은 공격자는 저장된 자격 증명을 알거나 교체하지 않고도 SMB 네트워크 폴더, FTP, 데스크톱 및 이메일과 같은 구성된 스캔 대상을 조회하고 수정할 수 있습니다. 결과적으로 두 가지 주요 공격 벡터가 존재합니다...

GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool

The threat actor behind the GIFTEDCROOK malware has made significant updates to turn the malicious program from a basic browser data stealer to a potent intelligence-gathering tool. "Recent campaigns in June 2025 demonstrate GIFTEDCROOK's enhanced ability to exfiltrate a broad range of sensitive...

SUSE CVE-2017-3157

By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Information could be retrieved by the attacker by, e.g., using hidden sections to store the information, tricking the user in...

StrongPity APT Back with Kurdish-Aimed Watering Hole Attacks

The APT group known as StrongPity is back with a new watering-hole campaign, targeting mainly Kurdish victims in Turkey and Syria. The malware served offers operators the ability to search for and exfiltrate any file or document from a victim’s machine. The group a.k.a. Promethium is operating a...