Tdarr 2.00.15 - Command Injection Vulnerability

Exploit Title: Tdarr 2.00.15 - Command Injection Exploit Author: Sam Smith Vendor Homepage: https://tdarr.io Software Link: https://f000.backblazeb2.com/file/tdarrs/versions/2.00.15/linuxarm64/TdarrServer.zip Version: 2.00.15 likely also older versions Tested on: 2.00.15 Exploit: The Help tab...

Tdarr 2.00.15 Command Injection

Exploit Title: Tdarr 2.00.15 - Command Injection Date: 10/03/2022 Exploit Author: Sam Smith Vendor Homepage: https://tdarr.io Software Link: https://f000.backblazeb2.com/file/tdarrs/versions/2.00.15/linuxarm64/TdarrServer.zip Version: 2.00.15 likely also older versions Tested on: 2.00.15 Exploit:...

Keychain vulnerability in macOS

On Monday, Patrick Wardle, a respected security researcher at Synack and owner of Objective-See, sent a tweet about a keychain vulnerability he had found in macOS High Sierra. As his tweet showed, it is possible for a malicious app to extract, and then exfiltrate, keychain data from High Sierra,...

On the Microsoft Malware Protection RCE, Handbrake, and Trump's EO

Mike Mimoso and Chris Brook discuss the news of the week, including Tavis Ormandy and Natalie Silvanovich’s Microsoft Malware Protection Engine bug, Handbrake OS X malware, the HP keylogger, Trump’s Cybersecurity EO, and more. Download: ThreatpostNewsWrapMay122017.mp3 Music by Chris Gonsalves...

HandBrake Installed (macOS)

Binary data macosxhandbrakeinstalled.nbin...

HandBrake OSX/Proton.B Trojan Backdoor (macOS)

According to its binary checksum, the version of HandBrake installed on the remote macOS or Mac OS X host is affected by the OSX/Proton.B trojan backdoor. HandBrake was briefly distributed with the trojan due to a compromised mirror hosting the software. An unauthenticated, remote attacker can...

HandBrake for Mac Compromised with Proton Spyware

The handlers of the open source HandBrake video transcoder are warning anyone who recently downloaded the Mac version of the software that they’re likely infected with malware. HandBrake warned users on Saturday of a compromise of one of its mirror download servers, and said anyone who grabbed th...

Website of Popular Mac Software Hacked to Spread Malware

If you have recently downloaded the popular open source video transcoder app HandBrake on your Mac, there are chances that your computer is infected with a notorious Remote Access Trojan RAT. The HandBrake team issued a security alert on Saturday, warning Mac users that one of its mirror servers ...