3808 matches found
CVE-2022-24974
Links may not be rewritten according to policy in some specially formatted emails...
CVE-2022-24974
Links may not be rewritten according to policy in some specially formatted emails...
CVE-2022-24974
Links may not be rewritten according to policy in some specially formatted emails...
Update: Destructive Malware Targeting Organizations in Ukraine
Summary Actions to Take Today: • Set antivirus and antimalware programs to conduct regular scans. • Enable strong spam filters to prevent phishing emails from reaching end users. • Filter network traffic. • Update software. • Require multifactor authentication. Updated April 28, 2022 This advisor...
How to detect phishing images in emails
By Uzair Amir Phishing has long been a common way to induce a receiver to unveil personal data. Primarily, it works… This is a post from HackRead.com Read the original post: How to detect phishing images in emails...
Emotet Testing New Delivery Ideas After Microsoft Disables VBA Macros by Default
The threat actor behind the prolific Emotet botnet is testing new attack methods on a small scale before co-opting them into their larger volume malspam campaigns, potentially in response to Microsoft's move to disable Visual Basic for Applications VBA macros by default across its products. Calli...
OldGremlin, a threat actor targeting Russian organizations with phishing emails since 2020
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here After almost a year, OldGremlin made a comeback in March 2022 by resuming their malicious email campaigns against two Russian organizations. Over the last two years, OldGremlin has carried out 13 malicious email campaigns...
CVE-2022-1186
The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5...
FreeBSD : Nextcloud Calendar -- SMTP Command Injection (2a314635-be46-11ec-a06f-d4c9ef517024)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2a314635-be46-11ec-a06f-d4c9ef517024 advisory. - Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in...
Command injection
Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the email value in the JSON request, a malicious attacker can inject newlines to break out of the RCPT TO:...
CVE-2022-24838 Command Injection in Appointment Emails for Nextcloud Calendar
Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the email value in the JSON request, a malicious attacker can inject newlines to break out of the RCPT TO:...
CVE-2022-24838 Command Injection in Appointment Emails for Nextcloud Calendar
Nextcloud Calendar is a calendar application for the nextcloud framework. SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the email value in the JSON request, a malicious attacker can inject newlines to break out of the RCPT TO:...
Command Injection in Appointment Emails for Calendar
None...
Nextcloud Calendar -- SMTP Command Injection
reports: SMTP Command Injection in Appointment Emails via Newlines: as newlines and special characters are not sanitized in the email value in the JSON request, a malicious attacker can inject newlines to break out of the RCPT TO: SMTP command and begin injecting arbitrary SMTP commands...
PT-2022-13751 · Gnuboard5 · Gnuboard5
Name of the Vulnerable Software and Affected Versions: gnuboard/gnuboard5 versions prior to and including 5.5.5 Description: The issue concerns the use of a broken or risky cryptographic algorithm, leading to exposure of sensitive information. This allows an attacker to derive the email address o...
Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States
A 32-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for the individual's criminal work as a "high-level hacker" in the financially motivated group FIN7. Denys Iarmak, who worked as a penetration tester for the cartel from November 2016 through November 2018, ha...
Anonymous Affiliate NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data
By Waqas The data leaked by the Anonymous affiliate group contains 4,000 files and more than 900,000 emails from Russian… This is a post from HackRead.com Read the original post: Anonymous Affiliate NB65 Breach State-Run Russian Broadcaster; Leak 786GB of Data...
Input validation
Improper input validation in all versions of GitLab CE/EE using sendmail to send emails allowed an attacker to steal environment variables via specially crafted email addresses...
