RIG Exploit Kit URL

RIG exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Successful infection will allow the attacker to download additional malware to the target...

CVE-2018-8937

An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirecturl parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code...

Open redirect

An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirecturl parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code...

CVE-2018-8937

Open-AudIT Professional 2.1 contains an open redirect vulnerability triggered by injecting a malicious payload into the redirect_url parameter of the /login URI. The issue, described across multiple sources (including CVE-2018-8937 and CNVD/CVE records), can be exploited using a data:text/html;ba...

Spelevo Exploit Kit Landing Page

Spelevo exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Successful infection will allow the attacker to download additional malware to the target...

GrandSoft Exploit Kit Gate

GrandSoft exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Successful infection will allow the attacker to download additional malware to the target...

GrandSoft Exploit Kit Gate

GrandSoft exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Successful infection will allow the attacker to download additional malware to the target...

Cross site scripting

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

CVE-2017-14096

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

CVE-2017-14096

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

CVE-2017-14096

A stored cross site scripting XSS vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems...

Cobalt Strike Scripted Web Delivery Remote Code Execution

Certain evasion tools obfuscate scripts in order to circumvent inspection by security software. An attacker could use such evasion methods in order to execute arbitrary code on the target, using it to download and execute a malicious payload...

BSA-2018-588

Security Advisory ID : BSA-2018-588 Component : Apache Strusts2 Revision : 2.0: Final In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload...

Cobalt Strike Payload Remote Code Execution

Cobalt Strike is an exploit kit that operates by delivering malicious payload to the victim's computer...

OpenMRS Remote Command Execution Vulnerability

OpenMRS Reference Application is a suite of open source EHR applications.Reporting Compatibility Add On is one of the compatibility reporting components. A remote command execution vulnerability exists in OpenMRS, which is caused by the application failing to authenticate the user when...

Mahara cross-site scripting vulnerability (CNVD-2017-33311)

Mahara is a social networking system. The system includes a blog, resume builder, file manager, and more. A security vulnerability exists in Mahara. An attacker can exploit the vulnerability to submit a malicious payload...

Inside the CCleaner Backdoor Attack

MADRID—As the investigation continues into the backdoor planted inside CCleaner, two members of parent company Avast’s threat intelligence team said today the desktop and cloud versions of the popular software contained different payloads. The revelation was made during a talk at Virus Bulletin...

Threat Round Up for Aug 25 - Sep 1

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between August 25 and September 1. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...

Exploit for CVE-2017-8570

Based on the provided context, here is a summary of the analysis: Classification: Exploit toolkit for CVE-2017-8570, a Microsoft Office PPSX RCE vulnerability. Primary Functionality: The toolkit generates a malicious PPSX file and delivers a payload either local or remote to the victim. Key...

Threat Analysis: Word Documents with Embedded Macros Leveraging Emotet Trojan

Many customers have recently asked how Carbon Black's solutions detect macros and droppers specifically referencing Emotet dropper files. Customers often say that macros and droppers are an ongoing problem in their environments. They are also seen day-to-day by most practitioners. The analysis...