4954 matches found
Stealthy Malware Hidden in Images Takes to GoogleUserContent
Malware that uses Exchangeable Image File Format EXIF data to hide its code has migrated to a new platform: GoogleUserContent sites, such as Google+ and blogger forums. In this technique, previously seen on Pastebin and GitHub, hackers embed malicious code within uploaded images – a stealthy...
Hacker Compromises Air Force Captain to Steal Sensitive Drone Info
A hacker has penetrated an Air Force captain’s computer to steal sensitive information about U.S. military drones and other state secrets, according to a cybersecurity firm’s investigation of dark web activities. On June 1, Recorded Future’s Insikt Group was monitoring underground criminal activi...
Hacker Sold Stolen U.S. Military Drone Documents On Dark Web For Just $200
You never know what you will find on the hidden Internet 'Dark Web.' Just about an hour ago we reported about someone selling remote access linked to security systems at a major International airport for $10. It has been reported that a hacker was found selling sensitive US Air Force documents on...
Hacker Sold Stolen U.S. Military Drone Documents On Dark Web For Just $200
You never know what you will find on the hidden Internet 'Dark Web.' Just about an hour ago we reported about someone selling remote access linked to security systems at a major International airport for $10. It has been reported that a hacker was found selling sensitive US Air Force documents on...
Hawkeye Keylogger – Reborn v8: An in-depth campaign analysis
Much of cybercrime today is fueled by underground markets where malware and cybercriminal services are available for purchase. These markets in the deep web commoditize malware operations. Even novice cybercriminals can buy malware toolkits and other services they might need for malware campaigns...
CVE-2018-3932
An exploitable stack-based buffer overflow exists in the Microsoft Word document conversion functionality of the Antenna House Office Server Document Converter version V6.1 Pro MR2 for Linux64 6,1,2018,0312. A crafted Microsoft Word DOC document can lead to a stack-based buffer overflow, resultin...
Microsoft Windows WordPad Security Bypass Vulnerability
Microsoft Windows 7 and others are a series of operating systems released by Microsoft Corporation in the U.S. WordPad is one of the filters that is installed by default on all Windows systems. A security bypass vulnerability exists in Microsoft Windows WordPad, which arises from the program's...
Sql injection
A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...
CVE-2018-12977
A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...
CVE-2018-12977: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the SoftExpert SE Excellence Suite 2.0 allows remote authenticated users to perform SQL heuristics by pulling information from the database with the "cddocument" parameter in the "Downloading Electronic Documents" section...
The NSA's Domestic Surveillance Centers
The Intercept has a long story about the NSA's domestic interception points. Includes some new Snowden documents...
Denial Of Service (DoS)
.NET Core is vulnerable to denial of service DoS. This is due to the way the .NET applications process XML documents which could lead to a denial of service condition when a specially crafted request is submitted...
SoftExpert Excellence Suite 2.0 - cddocument SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection Author: Seren PORSUK Date: 2018-06-28 Type: webapps Platform: PHP CVE= N/A Vendor Homepage : https://www.softexpert.com/solucao/softexpert-excellence-suite/ DETAILS A...
SoftExpert Excellence Suite 2.0 - cddocument SQL Injection
SoftExpert Excellence Suite 2.0 - cddocument SQL Injection Exploit Title: SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection Author: Seren PORSUK Date: 2018-06-28 Type: webapps Platform: PHP CVE= N/A Vendor Homepage : https://www.softexpert.com/solucao/softexpert-excellence-suite/ DETAI...
SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection
Exploit Title: SoftExpert Excellence Suite 2.0 - 'cddocument' SQL Injection Author: Seren PORSUK Date: 2018-06-28 Type: webapps Platform: PHP CVE= N/A Vendor Homepage : https://www.softexpert.com/solucao/softexpert-excellence-suite/ DETAILS A SQL injection vulnerability in the SoftExpert SE...
New macro-less technique to distribute malware
One of the most common and effective infection vectors, especially for businesses, is the use of malicious Office documents. This year alone, we witnessed two zero-days for both Flash and the VBScript engine, which were first actually embedded into Office documents before gaining wider adoption i...
[SECURITY] Fedora 27 Update: libgxps-0.3.0-5.fc27
libgxps is a GObject based library for handling and rendering XPS documents...
JavaScript script handlers Internet Explorer Code Execution
The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or Microsoft Office document...
New Malware Family Uses Custom UDP Protocol for C&C Communications
Security researchers have uncovered a new highly-targeted cyber espionage campaign, which is believed to be associated with a hacking group behind KHRAT backdoor Trojan and has been targeting organizations in South East Asia. According to researchers from Palo Alto, the hacking group, which they...
Threat Outbreak Alert RuleID33048: Email Messages Distributing Malicious Software on June 25, 2018
Medium Alert ID: 58288 First Published: 2018 June 25 19:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID33048 may contain the following files: Name | Siz...