CVE-2022-48077

Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL...

Information disclosure

Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL...

Honeypot-Factory: The Use of Deception in ICS/OT Environments

The recently published Security Navigator report of Orange Cyberdefense shows there has been a rapid increase of attacks on industrial control systems ICS in the past few years. Looking a bit closer, most of the attacks seem to have spilt over from traditional IT. That's to be expected, as...

Genymotion Desktop 代码问题漏洞

Genymotion Desktop is an Android emulator from Genymotion. A security vulnerability exists in Genymotion Desktop version v3.3.2, which stems from the presence of a DLL hijacking vulnerability that allows an attacker to elevate privileges and execute arbitrary code via a crafted DLL...

CVE-2022-48077

Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL...

CVE-2022-48077

CVE-2022-48077 concerns Genymotion Desktop v3.3.2, which is reported to contain a DLL hijacking vulnerability that allows an attacker to escalate privileges and execute arbitrary code via a crafted DLL. The available documents identify a local attacker scenario with low attack complexity and requ...

CVE-2022-48077

Genymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL...

Malicious code in beautifulsooup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20295d15744840724442dda39ce2b027e50b10c1d88c6096693b327ae31b9a9e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2464 Malicious code in ypcodestyle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5c9179a7e95371d31eb4fa1c785548c02eba03a736ebf5372a871b5ea2e8fd55 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ppsutil (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3a658c1977dfadbd6eebe5de461a48bdf08d122e5407e38078ca8c7399ad92aa Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requests-toolbetl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 88f13d19ebda7c72070169dad1b4c5f9d9be45a3b5ab374e9a10af50b049c950 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2022-34451

PowerPath Management Appliance with versions 3.3 & 3.2, 3.1 & 3.0 contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could potentially exploit this vulnerability, to hijack user sessions or trick a victim application user into unknowingly send arbitrary requests to...

Malicious code in beautifulsoup44 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e870f879046d64821bfc645ee9e014d478af57d12ac5ce5c82f9e1d9e995733a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1819 Malicious code in ebautifulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa52f4c2410a9205f2ec0b2f2e76cc51c0176488ca4e5a0d2074a9250a62b2d4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2022-43501

CVE-2022-43501 concerns the KASAGO TCP/IP stack from Zuken Elmic, which uses an insufficiently random generator for TCP Initial Sequence Numbers (ISNs). This weak RNG can allow an attacker to determine ISNs for current or future connections, enabling session hijacking or spoofing of new connectio...

Evasion Techniques Uncovered: An Analysis of APT Methods

By Christiaan Beek, with special thanks to Matt Green DLL search order hijacking is a technique used by attackers to elevate privileges on the compromised system, evade restrictions, and/or establish persistence on the system. The Windows operating system uses a common method to look for required...

CVE-2022-34362

IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM...

CVE-2022-34362

IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM...

Cross site scripting

IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM...

CVE-2022-34362 IBM Sterling Secure Proxy HOST header injection

IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM...