Experts Uncover Malware Attacks Targeting Corporate Networks in Latin America

Cybersecurity researchers on Thursday took the wraps off a new, ongoing espionage campaign targeting corporate networks in Spanish-speaking countries, specifically Venezuela, to spy on its victims. Dubbed "Bandidos" by ESET owing to the use of an upgraded variant of Bandook malware, the primary...

SQL Injection Vulnerability in RG-UAC Ruijie Unified Internet Behavior Management and Auditing System

Ruijie Unified Internet Behavior Management and Auditing System is an Internet behavior management and auditing product independently developed by Ruijie Networks. The RG-UAC Unified Internet Behavior Management and Audit System has a SQL injection vulnerability, which can be exploited by an...

CVE-2021-33218

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access...

CVE-2021-33220

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist...

CVE-2021-33215

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows Directory Traversal...

CVE-2021-33216

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented Backdoor exists, allowing shell access via a developer account...

Arbitrary File Download Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. The PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks suffers from an arbitrary file download vulnerability, which can be...

Command Execution Vulnerability in PatrolFlow Multiservice Security Gateway Intelligent Management Platform of Byzoro Networks (CNVD-2021-51332)

Beijing Byzoro Network Technology Co., Ltd. is a high-tech enterprise dedicated to building the next-generation secure Internet. A command execution vulnerability exists in the PatrolFlow multi-service security gateway intelligent management platform of Byzoro Networks, which can be exploited by...

Command Execution Vulnerability in Internet Behavior Management System of Tianrongxin Technology Group (CNVD-2021-51352)

Skyrise Technology Group is a leading provider of network security, big data and security cloud services in China. A command execution vulnerability exists in the Internet behavior management system of Tianrongxin Technology Group, which can be exploited by an attacker to gain control of a server...

ACRN Code Issues Vulnerabilities

ACRN is an open source virtual machine monitor for the Internet of Things. A null pointer dereference vulnerability exists in vqendchains in hw/pci/virtio/virtio.c in ACRN versions prior to 2.5. No detailed vulnerability details are provided at this time...

[SECURITY] Fedora 34 Update: seamonkey-2.53.8-1.fc34

SeaMonkey is an all-in-one Internet application suite previously made popular by Netscape and Mozilla. It includes an Internet browser, advanced e-mail, newsgroup and feed client, a calendar, IRC client, HTML editor and a tool to inspect the DOM for web pages. It is derived from the application...

ACRN 资源管理错误漏洞

ACRN is an open source project released by the Linux Foundation, which is a hypervisor designed for IoT and embedded devices. A post-release reuse vulnerability exists in the polling timer handler in ACRN related to devicemodel/hw/pci/virtio/.c. The vulnerability is not known. No detailed...

Weak Password Vulnerability in RG-NBR800GW of Ruijie Networks Co.

RG-NBR800GW is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. A weak password vulnerability exists in RG-NBR800GW, which can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in RG-NBR700W of Ruijie Networks Co.

RG-NBR700W is an Internet Behavior Management router which is designed for office full scenarios. The RG-NBR700W has a weak password vulnerability that can be exploited by an attacker to obtain sensitive information...

Command Execution Vulnerability in Tianrongxin Internet Behavior Management System (CNVD-2021-50625)

TIANRONGXIN Internet Behavior Management System is a professional product of TIANRONGXIN to meet the needs of network behavior management and content auditing in various industries based on years of experience in research and development of security products. There is a command execution...

Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise

The continuous improvement of security solutions has forced attackers to explore alternative ways to compromise systems. The rising number of firmware attacks and ransomware attacks via VPN devices and other internet-facing systems are examples of attacks initiated outside and below the operating...

ForgeRock Access Manager/OpenAM Pre-Auth Remote Code Execution Vulnerability (CVE-2021-35464): What You Need To Know

On June 29, 2021, security researcher Michael Stepankin @artsploit posted details of CVE-2021-35464, a pre-auth remote code execution RCE vulnerability in ForgeRock Access Manager identity and access management software. ForgeRock front-ends web applications and remote access solutions in many...

SQL Injection Vulnerability in Tianrongxin Internet Behavior Management System

TIANRONGXIN Internet Behavior Management System is a professional product of TIANRONGXIN to meet the needs of network behavior management and content auditing in various industries based on years of experience in research and development of security products. Tianrongxin Internet Behavior...

June 29, 2021—KB5004760 (OS Builds 19041.1082, 19042.1082, and 19043.1082) Out-of-band

None None...

Hackers Trick Microsoft Into Signing Netfilter Driver Loaded With Rootkit Malware

Microsoft on Friday said it's investigating an incident wherein a driver signed by the company turned out to be a malicious Windows rootkit that was observed communicating with command-and-control C2 servers located in China. The driver, called "Netfilter," is said to target gaming environments,...