New ComRAT Malware Uses Gmail to Receive Commands and Exfiltrate Data

Cybersecurity researchers today uncovered a new advanced version of ComRAT backdoor, one of the earliest known backdoors used by the Turla APT group, that leverages Gmail's web interface to covertly receive commands and exfiltrate sensitive data. "ComRAT v4 was first seen in 2017 and known still ...

Top 10 Routinely Exploited Vulnerabilities

Summary The Cybersecurity and Infrastructure Security Agency CISA, the Federal Bureau of Investigation FBI, and the broader U.S. Government are providing this technical guidance to advise IT security professionals at public and private sector organizations to place an increased priority on patchi...

SemCms suffers from SQL injection vulnerability (CNVD-2020-26981)

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS has SQL injection vulnerability. Attackers can exploit the vulnerability to obtain sensitive database information...

Net exhibition PHP foreign trade enterprise website red style backstage exists reloading system vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style backstage there is a reloading system vulnerability, attackers can use the vulnerability to reload t...

Web exhibition PHP foreign trade enterprise website red style has SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

Web exhibition PHP foreign trade enterprise website red style front SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. SQL injection vulnerability exists in the red style frontend of Nethub's PHP foreign trade enterprise website, which can be exploited by attackers to obta...

lua-resty-waf

This repository is an exploit module/toolkit targeting OpenResty, a high-performance web server built on the Nginx core. The primary vulnerability class/vector is not explicitly stated, but based on the code and metadata, it appears to be a remote code execution RCE vulnerability. The probable...

SemCms has a logic flaw vulnerability

SemCms is an open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browsers. SemCms there are logical flaws in the vulnerability , attackers can use the vulnerability to chang...

Web exhibition PHP foreign trade enterprise website exists arbitrary file deletion vulnerability

NetShow PHP Foreign Trade Enterprise Website is a premium enterprise website template for small and medium-sized enterprises. Nethub PHP foreign trade enterprise website exists arbitrary file deletion vulnerability, an attacker can exploit the vulnerability to delete arbitrary files, the integrit...

Sen. Schumer Pushes for TSA Employee Ban on TikTok App at Work

The Transportation Safety Authority TSA has become the latest federal agency to ban the use of TikTok among its employees based on national-security fears over how ByteDance, the Beijing-based company that owns the app, uses the data collected by it. Some TSA employees have used the app to create...

U.S. Charges 4 Chinese Military Officers in 2017 Equifax Hack

The U.S. Justice Department today unsealed indictments against four Chinese officers of the People's Liberation Army PLA accused of perpetrating the 2017 hack against consumer credit bureau Equifax that led to the theft of personal data on nearly 150 million Americans. DOJ officials said the four...

Rules on deepfakes take hold in the US

For years, an annual, must-pass federal spending bill has served as a vehicle for minor or contentious provisions that might otherwise falter in standalone legislation, such as the prohibition of new service member uniforms, or the indefinite detainment of individuals without trial. In 2019, that...

File Inclusion Vulnerability in fobcms

Grassroots Foreign Trade Platform is the development of programs and systems to manage customers. It includes a marketing system, a website building system, an email marketing system, a customer management system, a data methodology, and a content program. A file inclusion vulnerability exists in...

Two Former Twitter Employees Caught Spying On Users For Saudi Arabia

Two former employees of Twitter have been charged with spying on thousands of Twitter user accounts on behalf of the Saudi Arabian government, likely with the purpose of unmasking the identity of dissidents. According to an indictment filed on November 5 and unsealed just yesterday, one of the...

SEMCMS foreign trade website V3.9 backend AID parameters exist SQL injection vulnerability

SEMCMS is a set of open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox, Chrome, Safari, Opera and other mainstream browsers . SEMCMS foreign trade website V3.9 background AID parameters SQL injection vulnerability ,...

Design/Logic Flaw

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

CVE-2019-17534: Use After Free

vipsforeignloadgifscanimage in foreign/gifload.c in libvips before 8.8.2 tries to access a color map before a DGifGetImageDesc call, leading to a use-after-free...

SemCms foreign trade website PHP multilingual version v1.0.4 has file upload vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website PHP multilingual version v1.0.4 file upload vulnerability. The...

Trump’s Ukraine Mess Feels a Little Too Familiar

The unfolding drama ties two key threads of the Trump era: foreign interference in US elections and the president's distrust of his own intel agencies...

OpenEMR Cross-Site Scripting Vulnerability (CNVD-2019-28406)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A cross-site scripting vulnerability in the foreignid parameter in controller.php in OpenEMR 5.0.1 and earlier versions can be exploited by an attacker to execute arbitrary code in the context of ...