277 matches found
creepy
creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...
WhatsApp VBScript Campaign Uses Fake Documents to Install ManageEngine RMM Tool
Direct messages sent via WhatsApp are being used to distribute malicious Visual Basic Script VBScript files that lead to the installation of legitimate Remote Monitoring and Management RMM software. Per findings from Kaspersky, the active campaign is targeting users of WhatsApp Desktop and WhatsA...
Microsoft Azure Monitor Agent 代码问题漏洞
Microsoft Azure Monitor Agent is a monitoring agent program developed by the American company Microsoft. There are code-related vulnerabilities in Microsoft Azure Monitor Agent. Attackers can exploit these vulnerabilities to gain higher privileges...
EUVD-2026-26860
GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other security devices. It is a native application accessed locally, but it is also possible to enable remote access via the "WebCam Server" feature. Once enabled, it is possible to access t...
PT-2026-36737
Name of the Vulnerable Software and Affected Versions GV-VMS version V20 Description A stack overflow exists in the WebCam Server component of the video monitoring software. When remote access is enabled, the gvapi endpoint utilizes a specific authentication mechanism via an HTTP Authorization...
UptimeFlare 信息泄露漏洞
UptimeFlare is a cloud-based website availability monitoring and status page software developed by lyc8503 as an individual developer. UptimeFlare has a vulnerability related to information leakage, which stems from the direct import of server-side configurations from client code, potentially...
Fake Zoom and Google Meet scams install Teramind: A technical deep dive
UPDATE February 27, 2026 : We have added more clarity around the abuse of legitimate commercial products, and of Teramind's stealth mode. Important note: Teramind, the software vendor referenced in this article, has stated they are not affiliated with the threat actors described, did not deploy t...
CVE-2018-18550
ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user...
CVE-2020-7545
A CWE-284:Improper Access Control vulnerability exists in EcoStruxureª and SmartStruxureª Power Monitoring and SCADA Software see security notification for version information that could allow for arbitrary code execution on the server when an authorized user access an affected webpage...
The vulnerability of the Invite Request Handler component in the software for monitoring functionality and infrastructure of BlueWave Checkmate allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Invite Request Handler component in the software for monitoring functionality and infrastructure of BlueWave Checkmate is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerability of software for centralized monitoring and management in environments with a large number of devices, Lenovo XClarity Orchestrator (LXCO), arises from the use of an unprotected alternative channel. This allows a malicious actor to gain unauthorized access to internal functions or data.
The vulnerability of software for centralized monitoring and management in environments with a large number of devices relates to the use of an unprotected alternative channel. Exploiting this vulnerability can allow an attacker to gain unauthorized access to internal functions or data...
The vulnerability of the AjaxFwRulesController.ajaxDeviceFwRulesAction() function in the software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN allows a perpetrator to access information related to the database.
The vulnerability of the AjaxFwRulesController.ajaxDeviceFwRulesAction function in the software for remote monitoring with virtual private network capabilities of Advantech WebAccess/VPN is related to the failure to protect the SQL query structure. Exploiting this vulnerability may allow a...
The vulnerability of the AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() function in the remote monitoring software with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction function in the remote monitoring software with virtual private network capabilities, such as Advantech WebAccess/VPN, is related to an incorrect restriction on the path to the restricted directory...
The vulnerability of the AppManagementController.appUpgradeAction() function in the software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN allows a hacker to execute arbitrary commands on behalf of the web server user (www-data).
The vulnerability of the AppManagementController.appUpgradeAction function in software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities exists due to the failure to address the issues related to special elements used in the operating system command set...
Mysterious 'SmudgedSerpent' Hackers Target U.S. Policy Experts Amid Iran–Israel Tensions
A never-before-seen threat activity cluster codenamed UNKSmudgedSerpent has been attributed as behind a set of cyber attacks targeting academics and foreign policy experts between June and August 2025, coinciding with heightened geopolitical tensions between Iran and Israel. "UNKSmudgedSerpent...
EUVD-2025-35164
All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text. This allows an attacker with access to the network to read the transmitted sensitive data. An attacker can also freely modify the data on the wire. The monitoring clients transmit the...
ConnectWise Automate Agent 安全漏洞
ConnectWise Automate Agent is a remote monitoring and management software from ConnectWise USA. A security vulnerability exists in ConnectWise Automate Agent that stems from not fully verifying the authenticity of files downloaded from a server, which could lead to a man-in-the-middle attack...
The vulnerability of the monitoring and network traffic analysis software in industrial networks, SINEC Traffic Analyzer, arises from uncontrolled resource consumption, allowing attackers to cause service interruptions.
The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to uncontrolled resource consumption. Exploiting this vulnerability could allow attackers to cause service interruptions...