Tencent HaboHaboMalHunter Security Bypass Vulnerability

Tencent Habo is a malware sample analysis and identification platform from Tencent. HaboMalHunter is a malware analysis tool that relies on the Dynamic Analysis Module, Static Analysis Module, and Task Scheduling Framework in a deep sandbox to automate the analysis of malicious samples. A securit...

CVE-2019-13125

HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation...

CVE-2019-13125

HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation...

CVE-2019-13125

HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation...

Design/Logic Flaw

HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation...

CVE-2019-13125

CVE-2019-13125 affects Tencent Habo/HaboMalHunter up to version 2.0.3. The root cause is a vulnerability related to PIE compilation that allows attackers to evade dynamic malware analysis, enabling bypass of sandbox analysis in the affected tool. Public documents describe the impact as bypassing ...

CVE-2019-13125

HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation...

New Dridex Variant Slips By Anti-Virus Detection

Researchers have spotted a variant of the Dridex banking trojan with new obfuscation capabilities that help it skirt anti-virus detection. While Dridex has been around since 2011, researchers told Threatpost Friday that they recently spotted phishing emails distributing a never-before-seen varian...

Arbitrary Code Injection in mobile-icon-resizer

mobile-icon-resizer resizes large images for use as icons for iOS and Android. mobile-icon-resizer has a code execution vulnerability in versions before 0.4.3. mobile-icon-resizer takes an options object as an argument to define the resulting icons as such: var options = config: './config.js'...

GHSA-MXJR-XMCG-FG7W Arbitrary Code Injection in mobile-icon-resizer

mobile-icon-resizer resizes large images for use as icons for iOS and Android. mobile-icon-resizer has a code execution vulnerability in versions before 0.4.3. mobile-icon-resizer takes an options object as an argument to define the resulting icons as such: var options = config: './config.js'...

Important: Red Hat Security Advisory: python security update

An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

The vulnerability of the extract_status_code function in the Keepalived network traffic balancing system, which allows a attacker to cause a service failure

The vulnerability of the extractstatuscode function in the keepalived network traffic balancing system’s lib/html.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2017-10720

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi name. This application is installe...

CVE-2017-10722

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi password. This application is...

CVE-2017-10720

CVE-2017-10720 concerns the Shekar Endoscope desktop software. The issue is a stack overflow in the desktop application when more than 26 characters are provided for the Wi‑Fi name. The vulnerable code path involves the DLL avilib.dll and a function flow culminating in a memmove call that uses a ...

CVE-2017-10722

Recently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop application used to connect to the device suffers from a stack overflow if more than 26 characters are passed to it as the Wi-Fi password. This application is...

CVE-2019-5017

CVE-2019-5017 concerns KCodes NetUSB.ko in NETGEAR Nighthawk/other routers. The TALOS advisories confirm an unauthenticated remote kernel information-disclosure vulnerability in NetUSB.ko that can return multiple addresses, including a base address for NetUSB.ko (e.g., 0xBF111000) via crafted pac...

Adobe Animator suffers from dll hijacking vulnerability

Adobe Animator is a 2D vector animation creation software. Adobe Animator has a dll hijacking vulnerability when processing xfl project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

Adobe Character Animator suffers from dll hijacking vulnerability

Adobe Character Animator is a character animation software. Adobe Character Animator has a dll hijacking vulnerability when handling chproj project files, which can be exploited by attackers to load a malicious dll and execute malicious code...

Adobe Premiere Pro suffers from dll hijacking vulnerability

Adobe Premiere Pro is a video editing software. Adobe Premiere Pro has a dll hijacking vulnerability when processing prproj project files, which can be exploited by an attacker to load a malicious dll and execute malicious code...