Dark Web Getting Loaded With Bogus Covid-19 Vaccines and Forged Cards

Bogus COVID-19 test results, fraudulent vaccination cards, and questionable vaccines are emerging a hot commodity on the dark web in what's the latest in a long list of cybercrimes capitalizing on the coronavirus pandemic. "A new and troubling phenomenon is that consumers are buying COVID-19...

Huawei EulerOS: Security Advisory for nasm (EulerOS-SA-2021-1820)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : nasm (EulerOS-SA-2021-1820)

According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption crashed of nasm when handling a crafted file due to...

FBI shuts down malware on hundreds of Exchange servers, opens Pandora’s box

A rather remarkable story has emerged, setting the scene for lively debates about permissible system access. A press release from the US Department of Justice Judge has revealed that the FBI were granted permission to perform some tech support backdoor removal. Bizarrely, they did this without...

Cross site request forgery (csrf)

Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0EG1T5TE, V2.5.5, ZXHN H108N V2.5.5BTMT1...

CVE-2021-21729

The CVE-2021-21729 entry describes a CSRF vulnerability in ZTE router models ZXHN H168N (V3.5.0_EG1T5_TE, V2.5.5) and ZXHN H108N (V2.5.5_BTMT1). Root cause: pages lack CSRF random value verification, enabling an attacker to perform unauthorized operations by crafting messages. Affected products a...

DeepDotWeb Admin Pleads Guilty to Money Laundering Charges

The U.S. Department of Justice DoJ on Wednesday said that an Israeli national pleaded guilty for his role as an "administrator" of a portal called DeepDotWeb DDW, a "news" website that "served as a gateway to numerous dark web marketplaces." According to the unsealed court documents, Tal Prihar,...

Nanopb 安全漏洞

Nanopb is a protocol buffer implementation for microprocessors by the individual developer of Nanopb. A security vulnerability exists in Nanopb that results in invalid "free" or "realloc" calls...

Illegal Content and the Blockchain

Security researchers have recently discovered a botnet with a novel defense against takedowns. Normally, authorities can disable a botnet by taking over its command-and-control server. With nowhere to go for instructions, the botnet is rendered useless. But over the years, botnet designers have...

Input validation

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

CVE-2021-21726

Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:...

Police shut down illegal video streaming app Mobdro with 100M users

By Habiba Rashid Authorities have arrested 4 people from Spain and Andorra while servers behind Mobdro have also been seized. Here's why it happened. This is a post from HackRead.com Read the original post: Police shut down illegal video streaming app Mobdro with 100M users...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libsolv Multiple Vulnerabilities (NS-SA-2021-0014)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libsolv packages installed that are affected by multiple vulnerabilities: - There is a NULL pointer dereference at ext/testcase.c function testcaseread in libsolvext.a in libsolv through 0.7.2 that will cause a denial of...

Siemens SINEMA Remote Connect Server 安全漏洞

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. An incorrect authorization vulnerability exists in Siemens SINEMA Remote Connect Server. An attacker...

Botnet Abusing Bitcoin Blockchain To Evade Detection

By Deeba Ahmed Cybercriminals are abusing Bitcoin transactions to carry out illegal crypto mining operations while staying under the radar. This is a post from HackRead.com Read the original post: Botnet Abusing Bitcoin Blockchain To Evade Detection...

Remote Code Execution (RCE)

Smarty is vulnerable to remote code execution. The library does not properly handle the illegal function names in function name='blah'/function, allowing a malicious user to inject and execute arbitrary commands...

EulerOS 2.0 SP2 : nasm (EulerOS-SA-2021-1332)

According to the versions of the nasm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Netwide Assembler NASM 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is allocated in the...

Cybercriminal Enterprise 'Ringleaders' Stole $55M Via COVID-19 Fraud, Romance Scams

Click to Register U.S. law enforcement arrested six “ringleaders” of a Ghana-based cybercriminal enterprise, who had allegedly launched a slew of money-stealing scams dating back to 2013 that included romance scams, business email compromise attacks and fraud. Seized in the arrests were a slew of...

RainbowFish PacsOne Server SQL Injection Vulnerability

RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish. The system is used to save incoming images, and a SQL injection vulnerability exists in RainbowFish PacsOne Server that could be exploited by attackers to execute illegal SQL commands...

Clearview Facial-Recognition Technology Ruled Illegal in Canada

Canadian authorities have found that the collection of facial-recognition data by Clearview AI is illegal because it violates federal and provincial privacy laws, representing a win for individuals’ privacy and potentially setting a precedent for other legal challenges to the controversial...