Hamas May Be Threat to 8chan, QAnon Online

In October 2020, KrebsOnSecurity looked at how a web of sites connected to conspiracy theory movements QAnon and 8chan were being kept online by DDoS-Guard, a dodgy Russian firm that also hosts the official site for the terrorist group Hamas. New research shows DDoS-Guard relies on data centers...

NICER Protocol Deep Dive: Internet Exposure of DNS

Welcome to the NICER Protocol Deep Dive blog series! When we started researching what all was out on the internet way back in January, we had no idea we'd end up with a hefty, 137-page tome of a research report. The sheer length of such a thing might put off folks who might otherwise learn a thin...

Keeping Emissions in Check During Unprecedented Internet Use

As I reflect on 2020 and the way in which the pandemic affected the business world, what stands out to me is the incredible increase in streaming content consumed on the internet. We've seen launches of some of the highest-profile streaming services to date between late 2019 and 2020. People are...

Keeping Emissions in Check During Unprecedented Internet Use

As I reflect on 2020 and the way in which the pandemic affected the business world, what stands out to me is the incredible increase in streaming content consumed on the internet. We've seen launches of some of the highest-profile streaming services to date between late 2019 and 2020. People are...

Arbitrary File Download Vulnerability in the Collaboration Office System of Beijing Zhiyuan Internet Software Co.

Beijing Zhiyuan Internet Software Co., Ltd Zhiyuan Internet was founded in March 2002, is a technology enterprise integrating product design, research and development, sales and service. An arbitrary file download vulnerability exists in the collaborative office system of Beijing Zhiyuan Internet...

VulnCheck KEV: CVE-2001-0507

IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the "System file listing privilege elevation" vulnerability...

DEBIAN-CVE-2020-25275

Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts...

SQL Injection Vulnerability in Lionfish Community Group Buying System

The business scope of Xiamen Lionfish Network Technology Co., Ltd. includes: Internet of Things IoT technology services; Internet of Things IoT application services; Internet of Things IoT equipment manufacturing; and Internet of Things IoT equipment sales. Lionfish Community Group Buying System...

The Most Dangerous People on the Internet in 2020

This year saw plenty of destructive hacking and disinformation campaigns—but amid a pandemic and a historic election, the consequences have never been graver...

Linux: Read /etc/inetd.* and /etc/xinetd.* files

xinetd performs the same function as inetd: it starts programs that provide Internet services. Instead of having such servers started at system initialization time, and be dormant until a connection request arrives, xinetd is the only daemon process started and it listens on all service ports for...

CVE-2020-35364

Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot...

Code injection

Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot...

CVE-2020-35364

Beijing Huorong Internet Security 5.0.55.2 is affected. A non-admin user can escalate privileges by injecting code into a Huorong service process and waiting for the service to restart or for a system reboot. The CVE entry notes privilege escalation with code injection as the root issue; no speci...

CVE-2020-35364

Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot...

PT-2020-17316

Name of the Vulnerable Software and Affected Versions Beijing Huorong Internet Security version 5.0.55.2 Description The issue allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot. Recommendations For...

Beijing Huorong Internet Security Injection Vulnerability

ESET Internet Security is a suite of antivirus software for Internet security from ESET Slovakia. An injection vulnerability exists in Beijing Huorong Internet Security 5.0.55.2, which allows a non-administrative user to escalate privileges by injecting code into a process and then waiting for th...

CVE-2020-35364: Undefined Security Weakness

Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot...

Rapid7 Labs’ 2020 Naughty List Summary Report to Santa

As requested, your dutiful elves here at Rapid7 Labs have compiled a list of the naughty country networks being used to launch cyberattacks across the globe. Needless to say, some source networks have been very naughty dare we use the word “again,” since these all seem to be repeat offenders. To...

CVE-2020-27338

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access...

CVE-2020-24580

An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU2.31V1.1.47ae55. Lack of authentication functionality allows an attacker to assign a static IP address that was once used by a valid user...