20924 matches found
Vietnamese Threat Actor Infects 500,000 Devices Using 'Malverposting' Tactics
A Vietnamese threat actor has been attributed as behind a "malverposting" campaign on social media platforms to infect over 500,000 devices worldwide over the past three months to deliver variants of information stealers such as S1deload Stealer and SYS01stealer. Malverposting refers to the use o...
Medium: docker
Issue Overview: A flaw was found in Moby. This flaw allows an attacker to bypass primary group restrictions due to a flaw in the supplementary group access setup. CVE-2022-36109 Docker version 20.10.15, build fd82621 is vulnerable to Insecure Permissions. Unauthorized users outside the Docker...
Friday Squid Blogging: More Squid Camouflage Research
Heres a research group trying to replicate squid cell transparency in mammalian cells. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...
Exploit for CVE-2023-31443
CVE-2023-31443 nordugrid-arc-wn 6.14.0 DoS/LPE. Suggested...
North Korean-Backed Group’s Sparks X_Trader Supply Chain Attack
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The XTrader software supply chain attack affected at least a number of critical infrastructure entities in the United States and Europe. To receive real-time threat advisories, please follow HiveForce La...
Sage Group Sage 300 信任管理问题漏洞
Sage Group Sage 300 is a well-established closed-source Enterprise Resource Planning ERP solution from Sage Group, UK, designed to facilitate the management of organizations. A security vulnerability exists in Sage Group Sage 300 version 2022 and prior versions, which stems from the use of a...
Sage Group Sage 300 信任管理问题漏洞
Sage Group Sage 300 is a well-established, closed-source enterprise resource planning ERP solution from Sage Group UK, designed to facilitate the management of an organization. A security vulnerability exists in Sage Group Sage 300 version 2022 and prior versions that stems from the use of a...
SUSE-SU-2023:0795-2 Security update for docker
This update for docker fixes the following issues: Docker was updated to 20.10.23-ce. See upstream changelog at https://docs.docker.com/engine/release-notes/201023 Docker was updated to 20.10.21-ce bsc1206065 See upstream changelog at https://docs.docker.com/engine/release-notes/201021 Security...
Charming Kitten Hackers Utilize New Tactics with BellaCiao Malware
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Iranian APT group, Charming Kitten, is using a new, sophisticated malware called BellaCiao to target specific victims in multiple regions, employing unique communication tactics with its...
Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware
Microsoft has confirmed that the active exploitation of PaperCut servers is linked to attacks that are designed to deliver Cl0p and LockBit ransomware families. The tech giant's threat intelligence team is attributing a subset of the intrusions to a financially motivated actor it tracks under the...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
Cross site scripting
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
MilleGPG5 5.9.2 Local Privilege Escalation
Exploit Title: MilleGPG5 5.9.2 Gennaio 2023 - Local Privilege Escalation / Incorrect Access Control Date: 2023-04-28 Exploit Author: Andrea Intilangelo Vendor Homepage: https://millegpg.it/ Software Homepage: https://millegpg.it - https://millewin.it/prodotti/governo-clinico-3/ Software Link:...
Intermesh BV Group Office 跨站脚本漏洞
Intermesh BV Group Office is an enterprise CRM and groupware tool from Intermesh BV open source. A security vulnerability exists in Intermesh BV Group Office version 6.6.145. An attacker can exploit the vulnerability to elevate privileges and obtain sensitive information via the GOLANGUAGE cookie...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
CVE-2023-25292
Reflected Cross Site Scripting XSS in Intermesh BV Group-Office version 6.6.145, allows attackers to gain escalated privileges and gain sensitive information via the GOLANGUAGE cookie...
Malicious code in algo-svnlook (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 43c5a376e52bfedce15db5be9f98c7b41f7f9b385af24f412be974fa117f22a4 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
The vulnerability of Group Policy Services in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of Group Policy Services in Windows operating systems is related to the bypassing of security functions. Exploiting this vulnerability can allow an attacker to increase their privileges...
MAL-2023-16 Malicious code in 3a-look (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9a61325b2b1ed4acb6eb7991d48682f56a090fbf84663645a94f4d8415e5b00b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...
Malicious code in 3a-spawn (npm)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbd096556ffc90070942d3750f4d790cad77115f15c0e3b8aec5d6788bc817d8 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...