9028 matches found
CVE-2017-11318
Cobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In addition, the attacker can execute system commands remotely by abusing pre-backup events...
CVE-2017-7678
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
CVE-2017-7678: Improper Neutralization of Input During Web Page Generation
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. This data, which could contain a script,...
Decryption Key to Original Petya Ransomware Released
The master key to the original version of the Petya ransomware – not to be confused with the latest and massive Petya/ExPetr outbreak that swept through the Ukraine and parts of Europe last month – has been released, allowing all the victims of previous Petya attacks to unscramble their encrypted...
All this EternalPetya stuff makes me WannaCry
Another week goes by and yet again we have another ransomware outbreak initially dropped by a malicious software update and eventually spreading within internal networks using several methods - including EternalBlue - the leaked exploit from the ShadowBrokers group. Security researchers can’t see...
PDNS Manager Remote Command Execution Vulnerability
Exploit for php platform in category web applications Details ======= Product: PDNS Manager Affected Versions: Git master 3bf4e28 2016-12-12 - 2bb00ea 2017-05-22 Fixed Versions: = Git Commit ccc4232 Vulnerability Type: Remote Command Execution Vendor URL: https://pdnsmanager.lmitsystems.de/ Vendo...
EternalPetya and the lost Salsa20 key
We have recently been facing a huge outbreak of a new Petya-like malware armed with an infector similar to WannaCry. The research is still in progress, and the full report will be published soon. In this post, we will focus on some new important aspects of the current malware. The low-level attac...
Petya Is Not Ransomware, It's a 'Wiper'
The outbreak of the ExPetr malware isn’t a ransomware attack, but more precisely, it’s a wiper attack that sabotaged PCs globally, overwriting their Master Boot Record forever. That’s the analysis of security experts from Kaspersky Lab and Comae Technologies who shared their latest research on th...
Original Author of Petya Ransomware is Back & He Wants to Help NotPetya Victims
The author of original Petya ransomware is back. After 6 months of silence, the author of the now infamous Petya ransomware appeared today on Twitter to help victims unlock their files encrypted by a new version of Petya, also known as NotPetya. "We're back having a look in NotPetya," tweeted...
New Petya Distribution Vectors Bubbling to Surface
Join Kaspersky Lab and Comae Technologies Thursday June 29, 2017 at 10 a.m. Eastern time for a webinar “The Inside Story of the Petya/ExPetr Ransomware.” Click here to attend. While Microsoft and others continue to shore up links between yesterday’s global ransomware outbreak and the update...
Turns Out New Petya is Not a Ransomware, It’s a Destructive Wiper Malware
What if I say the Tuesday's devastating global malware outbreak was not due to any ransomware infection? Yes, the Petya ransomware attacks that began infecting computers in several countries, including Russia, Ukraine, France, India and the United States on Tuesday and demands $300 ransom was not...
Complex Petya-Like Ransomware Outbreak Worse than WannaCry
Join Kaspersky Lab and Comae Technologies Thursday June 29, 2017 at 10 a.m. Eastern time for a webinar “The Inside Story of the Petya/ExPetr Ransomware.” Click here to attend. The attackers behind today’s global ransomware outbreak are spreading the malware using a modified version of the leaked...
Multiple Petya Ransomware Infections Reported
US-CERT has received multiple reports of Petya ransomware infections in many countries around the world. Ransomware is a type of malicious software that infects a computer and restricts users' access to the infected machine until a ransom is paid to unlock it. Individuals and organizations are...
NTFS 3.1 - Master File Table Denial of Service
Y0U HAVE BEEN EXPL0ITED!...
Code injection
The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary...
CVE-2017-3214
The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary...
CVE-2017-3214
The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary...
CVE-2017-3214
The CVE-2017-3214 entry concerns the Milwaukee ONE-KEY Android app, where the master token is stored in plaintext inside the APK binary. Connected sources corroborate this as part of a broader set of findings in IoT security testing: the master credentials are needed to obtain a bearer token, whi...
PT-2017-15708
Name of the Vulnerable Software and Affected Versions Milwaukee ONE-KEY Android mobile application affected versions not specified Description The issue concerns the storage of a master token in plaintext within the apk binary of the application. Recommendations At the moment, there is no...