4176 matches found
CVE-2019-13207
CVE-2019-13207 affects NLnet Labs NSD 4.2.0 where a stack-based buffer overflow occurs in the dname_concatenate() function of dname.c. This vulnerability can cause the zone parser to crash on malformed zone files (as observed in NSD 4.2.2 and linked advisories). Upstream fixes exist in later NSD ...
CVE-2019-13207
nsd-checkzone in NLnet Labs NSD 4.2.0 has a Stack-based Buffer Overflow in the dnameconcatenate function in dname.c...
Exploit for OS Command Injection in Docker
Breaking out of Docker via RunC A proof of concept code for CV...
ABB IDAL FTP Server Uncontrolled Format String
XL-19-004 - ABB IDAL FTP Server Uncontrolled Format String Vulnerability ======================================================================== Identifiers ----------- XL-19-004 CVE-2019-7230 ABBVU-IAMF-1902008 CVSS Score ---------- 8.8 AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Affected vendor...
Smart cities, difficult choices: privacy and security on the grid
All is not well in the land of smart city planning, as the latest major planned development from Google's sister company Sidewalk Labs continues to run into problems in Toronto, Canada. A groundswell of support? Building a city “From the ground up” is apparently no longer a thing: at least some...
A week in security (June 3 – 9)
Last week on Malwarebytes Labs, we rounded up some leaks and breaches, reported about Magecart skimmers found on Amazon CloudFront CDN, proudly announced we were awarded as Best Cybersecurity Vendor Blog at the annual EU Security Blogger Awards, discussed how Maine inches closer to shutting down...
S3 Ransomware Part 2: Prevention and Defense
The post S3 Ransomware Part 2: Prevention and Defense appeared first on Rhino Security Labs...
S3 Ransomware Part 1: Attack Vector
The post S3 Ransomware Part 1: Attack Vector appeared first on Rhino Security Labs...
Debian DSA-4456-1 : exim4 - security update
The Qualys Research Labs reported a flaw in Exim, a mail transport agent. Improper validation of the recipient address in the delivermessage function may result in the execution of arbitrary commands. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
Debian: Security Advisory (DSA-4456-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malwarebytes Labs wins best cybersecurity vendor blog at InfoSec’s European Security Blogger Awards
Infosec Europe is now well underway, and last night was the annual EU Security Blogger Awards, where InfoSecurity Magazine: …recognises the best blogs in the industry as first nominated by peers and then judged by a panel of mostly respected industry experts. Malwarebytes Labs was announced as...
[SECURITY] [DSA 4456-1] exim4 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4456-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 05, 2019 https://www.debian.org/security/faq -...
Government Sector in Central Asia Targeted With New HAWKBALL Backdoor Delivered via Microsoft Office Vulnerabilities
FireEye Labs recently observed an attack against the government sector in Central Asia. The attack involved the new HAWKBALL backdoor being delivered via well-known Microsoft Office vulnerabilities CVE-2017-11882 and CVE-2018-0802. HAWKBALL is a backdoor that attackers can use to collect...
Nvidia GeForce Experience Web Helper - Command Injection
//Send request to local GFE server function submitRequestport,secret var xhr = new XMLHttpRequest; xhr.open"POST", "http://127.0.0.1:"+port+"/gfeupdate/autoGFEInstall/", true; xhr.setRequestHeader"Accept", "text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8";...
Hackers Infect 50,000 MS-SQL and PHPMyAdmin Servers with Rootkit Malware
Cyber Security researchers at Guardicore Labs today published a detailed report on a widespread cryptojacking campaign attacking Windows MS-SQL and PHPMyAdmin servers worldwide. Dubbed Nansh0u, the malicious campaign is reportedly being carried out by an APT-style Chinese hacking group who has...
50k Servers Infected with Cryptomining Malware in Nansh0u Campaign
Up to 50,000 servers were infected over the past four months as part of a high-profile cryptojacking campaign, believed to orchestrated by Chinese-language adversaries. Researchers with Guardicore Labs, who disclosed the campaign Wednesday, said that the Nansh0u campaign named due to a text file...
Sensio Labs Symfony Password validator Access Control Error Vulnerability
Sensio Labs Symfony is the French company Sensio Labs a set of free , MVC-based PHP development framework. The framework provides commonly used functional components and tools , can be used to quickly create complex WEB program . password validator is one of the password validation program . An...
FIN7 Linked to Escalating Active Exploits for Microsoft SharePoint Bug
A recently patched, high-severity vulnerability in Microsoft SharePoint CVE-2019-0604 that allows remote code-execution is being increasingly exploited in the wild, according to researchers – possibly by the FIN7 group, among others. According to the Microsoft’s advisory, the vulnerability which...