STARK#MULE Targets Koreans with U.S. Military-themed Document Lures

An ongoing cyber attack campaign has set its sights on Korean-speaking individuals by employing U.S. Military-themed document lures to trick them into running malware on compromised systems. Cybersecurity firm Securonix is tracking the activity under the name STARKMULE. The scale of the attacks i...

The vulnerabilities of the APIkit components, the HTTP connector, and the OAuth2 Provider integrated into the API Gateway environment of the Mule Runtime, allow attackers to gain unauthorized access to protected information.

The vulnerabilities of the APIkit components, the HTTP connector, and the OAuth2 Provider integrated into the API Gateway environment of Mule Runtime Mule are related to errors in processing the relative path to the restricted directory. Exploiting these vulnerabilities can allow an attacker to...

Security Bulletin: Multiple vulnerabilities in Apache Commons Collections affect IBM InfoSphere Information Server

Summary Multiple vulnerabilities in Apache Commons Collections used by IBM InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2015-4852 DESCRIPTION: The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers t...

Mulesoft Mule Unsafe Deserialization

The MuleSoft Mule runtime engine before 3.8.0 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

Mule modules contain Directory Traversal

Directory Traversal in APIkit, http-connector, and OAuth2 Provider modules in Mulesoft 3.x, 4.x and Mulesoft API Gateway all versions released before August 1, 2019 allow remote attackers to read files accessible to the Mule process...

GHSA-MWH9-GR45-XVV4 Mule modules contain Directory Traversal

Directory Traversal in APIkit, http-connector, and OAuth2 Provider modules in Mulesoft 3.x, 4.x and Mulesoft API Gateway all versions released before August 1, 2019 allow remote attackers to read files accessible to the Mule process...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000079 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000076 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000078 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000075 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin (1.1), org.jruby:jruby (1.7.24) +3 more potentially affected by CVE-2018-1000073 via org.jruby:jruby-stdlib (1.7.24)

org.jruby:jruby-stdlib MAVEN version 1.7.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.jruby:jruby-stdlib and may be impacted: - com.github.fgiannesini.libsass.gradle.plugin:libsass-gradle-plugin 1.1 - org.jruby:jruby 1.7.24 -...

No, Colonel Gaddafi’s daughter isn’t emailing to give you untold riches

It’s not every day you receive a big money offer from someone claiming to sit in political asylum, but here we are. The following missive landed in our spam traps at the weekend. The mail claims to be from the daughter of no less than the late Colonel Gaddafi. Ayesha Gaddafi promises you untold...

CVE-2021-1630

XML external entity XXE vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers...

CVE-2021-1630

XML external entity XXE vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers...

CVE-2021-1630

XML external entity XXE vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers...

Xxe

XML external entity XXE vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers...

CVE-2021-1630

XML external entity XXE vulnerability affecting certain versions of a Mule runtime component that may affect CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on-premise customers...

CVE-2021-1630

CVE-2021-1630 is an XML External Entity (XXE) vulnerability in a Mule runtime component affecting multiple deployment options (CloudHub, GovCloud, Runtime Fabric, Pivotal Cloud Foundry, Private Cloud Edition, and on‑premises). The connected data consistently describe XXE as the underlying flaw, b...

MuleSoft Mule 代码问题漏洞

Mulesoft MuleSoft Mule is a lightweight integration platform from the US company MuleSoft Mulesoft. The platform supports message routing, data mapping, etc. between management nodes. A security vulnerability exists in MuleSoft Mule that stems from MuleSoft's discovery of an XML External Entity X...

PT-2021-13530

Name of the Vulnerable Software and Affected Versions: Mule runtime component affected versions not specified Description: The issue is an XML external entity XXE vulnerability affecting certain versions of a Mule runtime component. This may impact various platforms, including CloudHub, GovCloud,...