568 matches found
Other vulnerabilities in Ethernet smart contract FALCON 0x5AEf06eC39e98c05201ee1e54b653c372ECb9Cf3
FALCON is an ERC20 token on ethereum. The smart contract address is 0x5AEf06eC39e98c05201ee1e54b653c372ECb9Cf3, and its function Mining24 on line 102 can modify Owner and has no permission check, leading to an attacker being able to call the withdraw function line 274 to transfer all the ether in...
Stealth Falcon Targets Middle East with Windows BITS Feature
The notorious Stealth Falcon cyberespionage group has adopted a new backdoor using the Windows Background Intelligent Transfer Service BITS in its ongoing spyware attacks against journalists, activists and dissidents in the Middle East. According to researchers at ESET, attackers are exploiting t...
New Malware Uses Windows BITS Service to Stealthy Exfiltrate Data
Cybersecurity researchers have discovered a new computer virus associated with the Stealth Falcon state-sponsored cyber espionage group that abuses a built-in component of the Microsoft Windows operating system to stealthily exfiltrate stolen data to attacker-controlled server. Active since 2012,...
New Malware Uses Windows BITS Service to Stealthy Exfiltrate Data
Cybersecurity researchers have discovered a new computer virus associated with the Stealth Falcon state-sponsored cyber espionage group that abuses a built-in component of the Microsoft Windows operating system to stealthily exfiltrate stolen data to attacker-controlled server. Active since 2012,...
falconitservices.com XSS vulnerability
Vulnerable URL: https://www.falconitservices.com/SitePages/Home.aspx?FollowSite=0=%27-confirm%22OPENBUGBOUNTY%22-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3459359 VIP...
XML External Entity Injection And Information Disclosure
Falcon is vulnerable to XML external entity injection and information disclosure. It is possible to inject an external entity during XML entity parsing, and leak the location of the credential files in log messages during the data source entity parsing...
Automated Security Response: Falcon Orchestrator
CrowdStrike Falcon Orchestrator is an extendable Windows-based application that provides workflow automation, case management and security response functionality. The tool leverages the highly extensible APIs contained within the CrowdStrike Falcon Connect program. Falcon Orchestrator has only be...
Westermo WeOS Detection (SNMP)
SNMP based detection of Westermo WeOS devices like e.g. Westermo Falcon, Westermo Lynx or Westermo RedFox. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Code injection
The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2016-1177
The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors...
CVE-2016-1177
The CVE-2016-1177 entry concerns Falcon WisePoint and WisePoint Authenticator, where the management screen is vulnerable to clickjacking. Concrete details from connected sources show that WisePoint 4.3.1 and earlier, and WisePoint Authenticator 4.1.19.22 and earlier are affected. The root cause i...
Honeywell FALCON XLWeb FTP服务器跨目录漏洞
No description provided by source...
Honeywell FALCON XLWeb系列控制器登录绕过漏洞
No description provided by source...
Westermo RedFox Series, Wolverine Series, Lynx Series, Falcon Series, Viper Series 弱口令
No description provided by source...
KNX ETS 4.1.5 Build 3246 Buffer Overflow Vulnerability
Exploit for windows platform in category local exploits Title: Remote code execution vulnerability in the KNX management software ETS Category/Abstract: Buffer overflow vulnerability Product: ETS Engineering Tool Software Affected versions: ETS 4.1.5 Build 3246 no other versions tested Fixed in...
Honeywell Falcon XL Web Controller Directory Traversal Vulnerability - Active Check
Honeywell Falcon XL Web Controller is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Core Secrets — NSA Used ‘Undercover Agents’ In Foreign Companies
Sometimes we wonder that how the National Security Agency NSA reached such a wide range of its Surveillance operation across the world – which you can measure from several secret documents released by the former NSA contractor Edward Snowden. This hell parameter of the NSA’s operation was not...
CVE-2014-3909
Session fixation vulnerability in Falcon WisePoint 4.1.19.7 and earlier allows remote attackers to hijack web sessions via unspecified vectors...
