CVE-2022-3140

LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal...

Malicious code in graphql-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1579df6eb121dfcca4111c8ed7ad074f1b52d4847ad652e6b9cb71cea45015b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3447 Malicious code in graphql-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1579df6eb121dfcca4111c8ed7ad074f1b52d4847ad652e6b9cb71cea45015b0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

#StopRansomware: Vice Society

Note: This joint Cybersecurity Advisory CSA is part of an ongoing StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These StopRansomware advisories include recently and historically observed tactics, techniques,...

Warning issued about Vice Society ransomware targeting the education sector

The Federal Bureau of Investigation FBI, the Cybersecurity and Infrastructure Security Agency CISA, and the Multi-State Information Sharing and Analysis Center MS-ISAC have released a joint Cybersecurity Advisory CSA after observing Vice Society threat actors disproportionately targeting the...

#StopRansomware: Vice Society

CISA, the Federal Bureau of Investigation FBI, and the Multi-State Information Sharing and Analysis Center MS-ISAC have released a joint Cybersecurity Advisory CSA, StopRansomware: Vice Society, to disseminate tactics, techniques, and procedures TTPs and indicators of compromise IOCs associated...

ICPR Certificate Management

Request certificates via MS-ICPR Active Directory Certificate Services. Depending on the certificate template's configuration the resulting certificate can be used for various operations such as authentication. PFX certificate files that are saved are encrypted with a blank password. This module ...

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-13956

Summary IBM TRIRIGA Application Platform discloses CVE-2020-13956 Vulnerability Details CVEID:CVE-2020-13956 DESCRIPTION: Apache HttpClient could allow a remote attacker to bypass security restrictions, caused by the improper handling of malformed authority component in request URIs. By passing...

Exploit for CVE-2021-34527

PrintNightmare CVE-2021-34527 This version of the PrintNigh...

Malicious code in rpety-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a861356d1e3f8e163562836f71abd647ac225b55c790db1ec223853ec5979a29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5848 Malicious code in rpety-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a861356d1e3f8e163562836f71abd647ac225b55c790db1ec223853ec5979a29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Threat Actors Exploiting Multiple Vulnerabilities Against Zimbra Collaboration Suite

CISA and the Multi-State Information Sharing & Analysis Center MS-ISAC have released a joint Cybersecurity Advisory CSA in response to active exploitation of multiple vulnerabilities against Zimbra Collaboration Suite ZCS, an enterprise cloud-hosted collaboration software and email platform. CISA...

Microsoft bars Tutanota users from registering MS Teams accounts

By Waqas According to a Microsoft spokesperson, it will not be possible to change the current situation with Tutanota. Tutanota… This is a post from HackRead.com Read the original post: Microsoft bars Tutanota users from registering MS Teams accounts...

covid.setequedas.ms.gov.br Cross Site Scripting vulnerability OBB-2823799

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Countering Follina Attack (CVE- 2022-30190) with Trellix Network Security Platform’s Advanced Detection Features

Countering Follina Attack CVE- 2022-30190 with Trellix Network Security Platform’s Advanced Detection Features By Vinay Kumar and Chintan Shah · July 19, 2022 Executive summary During the end of May 2022, independent security researcher reported a vulnerability assigned CVE-2022-30190 in Microsof...

DFSCoerce

Coerce an authentication attempt over SMB to other machines via MS-DFSNM methods. Module Options msf use auxiliary/scanner/dcerpc/dfscoerce msf auxiliarydfscoerce show actions ...actions... msf auxiliarydfscoerce set ACTION msf auxiliarydfscoerce show options ...show and set options... msf...

SAMR Computer Management

Add, lookup and delete computer / machine accounts via MS-SAMR. By default standard active directory users can add up to 10 new computers to the domain. Administrative privileges however are required to delete the created accounts. Module Options msf use auxiliary/admin/dcerpc/samrcomputer msf...

Fixed CVE-2018-5741 in bind

CVE-2018-5741: update krb5,ms-self,subdomain descriptions...

MAL-2022-6170 Malicious code in small-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96bee317ebf983fc6131797932fc73436c62f4f95f0e963ae3622f7ab4647851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in small-ms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96bee317ebf983fc6131797932fc73436c62f4f95f0e963ae3622f7ab4647851 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...