20136 matches found
Microsoft Windows Multiple Vulnerabilities (KB5027215)
This host is missing an important security update according to Microsoft KB5027215 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-29351 Windows Group Policy Elevation of Privilege Vulnerability
...
CVE-2023-29351 Windows Group Policy Elevation of Privilege Vulnerability
...
CVE-2023-29351
Technical details about CVE-2023-29351 are not publicly available in the provided documents. Monitor Microsoft and NVD for updates on affected products, impact, and remediation.
nipro-group.com Cross Site Scripting vulnerability OBB-3425936
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Windows Group Policy Elevation of Privilege Vulnerability
...
Microsoft Windows Group Policy å®å Øę¼ę“
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Group Policy. An attacker could exploit the vulnerability to elevate privileges. The following products and...
MAL-2023-304 Malicious code in elliptic-parser (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0ffc8361769988057a4d6c1f79b5cdcf930ac38ce3f5243cd2af71837be266c1 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in tslib-util (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96184e29784d22573c84557538ba7af38ab35195910ce3960130857f3369bc0b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in elliptic-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3f5aa19fd478d27d6a061c40dbabd597ef510b0bc122de0b4da84de18f478059 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in vuewjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx b899bfc2ad4cc34bb998c5775bb55e7aa7410d54e7fd924f62d666bae1ad40c6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in chart-tablejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c6d78e3ccec4aa1bcee41b14b382246c7efaf8a725582a9ab36550d8fc6cb203 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-171 Malicious code in chart-tablejs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c6d78e3ccec4aa1bcee41b14b382246c7efaf8a725582a9ab36550d8fc6cb203 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-951 Malicious code in vuewjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx b899bfc2ad4cc34bb998c5775bb55e7aa7410d54e7fd924f62d666bae1ad40c6 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-911 Malicious code in tslib-util (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96184e29784d22573c84557538ba7af38ab35195910ce3960130857f3369bc0b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Asylum Ambuscade Unmasking the Hybrid Threat Group in Cybersecurity
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Asylum Ambuscade: A cybercrime group active since 2020, targeting banks, cryptocurrency traders, and governments in North America, Europe, Asia, Africa, and South America. Their tactics include spear...
Malicious code in jpeg-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7906a2514b62992b0bb412207830c603157b294619f8a328f6c8d95a8c494fde Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
MAL-2023-536 Malicious code in jpeg-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7906a2514b62992b0bb412207830c603157b294619f8a328f6c8d95a8c494fde Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in ttf-metadata (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx a8165c5b54908b5702e7a9b3b1fb7ac5d71d1ba10ea6e426237f526c4dfe1a91 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies
Vietnamese public companies have been targeted as part of an ongoing campaign that deploys a novel backdoor called SPECTRALVIPER. "SPECTRALVIPER is a heavily obfuscated, previously undisclosed, x64 backdoor that brings PE loading and injection, file upload and download, file and directory...