Mount Locker ransomware group leaks 18Gb worth Gunnebo AB data

By Waqas The Mount Locker ransomware group is known for targeting high-profile companies and leaking data if their demands are not met. This is a post from HackRead.com Read the original post: Mount Locker ransomware group leaks 18Gb worth Gunnebo AB data...

Facebook, News and XSS Underpin Complex Browser Locker Attack

A sophisticated “browser locker” campaign is spreading via Facebook, ultimately pushing a tech-support scam. The effort is more advanced than most, because it involves exploiting a cross-site scripting XSS vulnerability on a popular news site, researchers said. Browser lockers are a type of...

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

Authorization

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

CVE-2020-13626

The CVE-2020-13626 entry concerns OnePlus App Locker (up to 2020-10-06). The vulnerability allows physically proximate attackers to exploit Google Assistant to bypass an authorization check and send an SMS while the SMS app is locked. CVSS data provided: CVSS v3.1: AV=Physical, AC=Low, PR=None, U...

CVE-2020-13626

OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked...

Maze Ransomware Adopts Ragnar Locker Virtual-Machine Approach

The operators of the Maze ransomware have added a fresh trick to their bag of badness: Distributing ransomware payloads via virtual machines VM. It’s a “radical” approach, according to researchers, meant to help the ransomware get around endpoint defense. That’s according to researchers with Soph...

CWT Travel Agency Faces $4.5M Ransom in Cyberattack, Report

CWT, a giant in the corporate travel agency world with a global clientele, may have faced payment of $4.5 million to unknown hackers in the wake of a ransomware attack. Independent malware hunter @JAMESWT tweeted on Thursday that a malware sample used against CWT formerly known as Carlson Wagonli...

TAU Threat Analysis: Medusa Locker Ransomware

In recent weeks Carbon Black’s Threat Analysis Unit TAU has seen an increase in the number of infections attributed to the Medusa Locker ransomware family. There were notable traits exhibited by Medusa Locker in these attacks that warranted further investigation to determine behavioral tactics th...

TAU Threat Analysis: Medusa Locker Ransomware

In recent weeks Carbon Black’s Threat Analysis Unit TAU has seen an increase in the number of infections attributed to the Medusa Locker ransomware family. There were notable traits exhibited by Medusa Locker in these attacks that warranted further investigation to determine behavioral tactics th...

WOOF locker: Unmasking the browser locker behind a stealthy tech support scam operation

Update 01-27-2020: Shortly after this blog was published we noticed that a large part of the infrastructure behind this browlock was taken down. The malicious server responsible for redirections is no longer responding and we have not observed any new live browlock from this 2 year old campaign. ...

Cross site request forgery (csrf)

The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=opanda-item&page=license-manager-sociallocker-next licensekey parameter...

CVE-2015-9425

The social-locker plugin before 4.2.5 for WordPress has CSRF with resultant XSS via the wp-admin/edit.php?posttype=opanda-item&page=license-manager-sociallocker-next licensekey parameter...

HT2 Labs Learning Locker Cross-Site Scripting Vulnerability

HT2 Labs Learning Locker is an open source learning record repository. A security vulnerability exists in HT2 Labs Learning Locker version 3.15.1. An attacker can exploit this vulnerability to inject malicious HTML and JavaScript code into the DOM of a website...

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

CVE-2019-12834

HT2 Labs Learning Locker 3.15.1 has a cross-site scripting (XSS) flaw allowing injection of HTML/JavaScript into the DOM via PATH_INFO to the dashboards/ URI. The vulnerability is documented across multiple CVE records in the connected set, with consistent description of DOM-based injection and l...

CVE-2019-12834

In HT2 Labs Learning Locker 3.15.1, it's possible to inject malicious HTML and JavaScript code into the DOM of the website via the PATHINFO to the dashboards/ URI...

The vulnerability of the fly-wm window manager in the Astra Linux operating system allows a hacker to gain access to confidential data.

The vulnerability of the fly-wm window manager in the Astra Linux operating system is related to errors in the algorithm for calculating permissions when changing the size of the window of the built-in screen locker. This allows confidential data to be displayed in a virtual machine or in an...