'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATs

A new malware campaign targeting Afghanistan and India is exploiting a now-patched, 20-year-old flaw affecting Microsoft Office to deploy an array of commodity remote access trojans RATs that allow the adversary to gain complete control over the compromised endpoints. Cisco Talos attributed the...

Unauthorized Access Vulnerability in AXIS P5522-E Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P5522-E Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS Q7424-R Video Encoder

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS Q7424-R Video Encoder, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS P5512-E Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P5512-E Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M3114 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M3114 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS 211W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS 211W Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS P1357 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in the AXIS P1357 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis 206 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis 206 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis 205 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis 205 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis 221 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis 221 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis M1011-W Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis M1011-W Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Axis M1011 Network Camera

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in Axis M1011 Network Camera, which can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in AXIS M1014

Axis is an IT company that specializes in providing web video solutions. An unauthorized access vulnerability exists in AXIS M1014, which can be exploited by attackers to obtain sensitive information...

Facebook Tracks APT32 OceanLotus Hackers to IT Company in Vietnam

Cybersecurity researchers from Facebook today formally linked the activities of a Vietnamese threat actor to an IT company in the country after the group was caught abusing its platform to hack into people's accounts and distribute malware. Tracked as APT32 or Bismuth, OceanLotus, and Cobalt Kitt...

Facebook Tracks APT32 OceanLotus Hackers to IT Company in Vietnam

Cybersecurity researchers from Facebook today formally linked the activities of a Vietnamese threat actor to an IT company in the country after the group was caught abusing its platform to hack into people's accounts and distribute malware. Tracked as APT32 or Bismuth, OceanLotus, and Cobalt Kitt...

Indian IT Company Was Hired to Hack Politicians, Investors, Journalists Worldwide

A team of cybersecurity researchers today outed a little-known Indian IT firm that has secretly been operating as a global hackers-for-hire service or hacking-as-a-service platform. Based in Delhi, BellTroX InfoTech allegedly targeted thousands of high-profile individuals and hundreds of...

LuckyMouse signs malicious NDISProxy driver with certificate of Chinese IT company

What happened? Since March 2018 we have discovered several infections where a previously unknown Trojan was injected into the lsass.exe system process memory. These implants were injected by the digitally signed 32- and 64-bit network filtering driver NDISProxy. Interestingly, this driver is sign...

Potent Skygofree Malware Packs ‘Never-Before-Seen’ Features

Researchers have identified a powerful new Android malware strain called Skygofree capable of eavesdropping on WhatsApp messages, siphoning private data off phones and allowing adversaries to open reverse shell modules on targeted devices, giving attackers ultimate remote control. Researchers sai...

Artnana Webboard 1.4 Cross Site Scripting

Artnana Webboard version 1.4 XSS Cross-site Scripting Web Security Vulnerabilities Exploit Title: Artnana Webboard version 1.4 Multiple XSS Security Vulnerabilities Product: Webboard Vendor: Artnana Vulnerable Versions: version 1.4 Tested Version: version 1.4 Advisory Publication: May 09, 2015...

ShopSystem SQL Injection vulnerability

No description provided by source. Exploit Title: ShopSystem SQL Injection vulnerability Date: 05.04.2010 Author: Valentin Category: webapps/0day :: General information :: ShopSystem SQL Injection vulnerability :: by Valentin Hoebel :: [email protected] :: Product information :: Name =...