698 matches found
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
Fedora: Security Advisory for nebula (FEDORA-2022-5038c3236c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: nebula-1.6.0-2.fc36
A scalable overlay networking tool with a focus on performance, simplicity and security...
Demo: Your data has been encrypted! Stopping ransomware attacks with Malwarebytes EDR
It’s no secret that ransomware is one of the most pressing cyber threats of our day. What worse, ransomware gangs have increased their attacks on a range of vulnerable industries, with disruptions to business operations, million-dollar ransom demands, data exfiltration, and extortion. With...
Command Execution Vulnerability in Netnifty Vulnerability Scanning System
Beijing Netnifty Information Technology Co., Ltd. covers network border security protection, application and data security protection, network security risk management, professional security solutions and professional security services. A command execution vulnerability exists in the Netnifty...
Fedora: Security Advisory for nebula (FEDORA-2022-fae3ecee19)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 36 Update: nebula-1.5.2-5.fc36
A scalable overlay networking tool with a focus on performance, simplicity and security...
Malicious Package
Overview @iwcp/nebula-ui is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package w...
Introducing EDR for Linux: Remediating and isolating threats on Linux servers
We’re excited to announce our new EDR for Linux offering, which extends our advanced protection and response capabilities to Linux devices via Nebula and OneView. In this post, we show you what remediating and isolating threats on Linux servers looks like with Malwarebytes EDR for Linux. Let’s ge...
Introducing Malwarebytes DNS Filtering module: How to block sites and create policy rules
We’re happy to announce Malwarebytes DNS Filtering, a new module for the Nebula platform which helps block access to malicious websites and limit threats introduced by suspicious content. But how exactly does it work, you ask? In this post, we give a basic walkthrough of the module, starting off...
Malicious code in @iwcp/nebula-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46e24fcc1ba62a0b1cb165fdc4b1075ef12d23d1cf279ec8a71caff22937949b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-367 Malicious code in @iwcp/nebula-ui (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46e24fcc1ba62a0b1cb165fdc4b1075ef12d23d1cf279ec8a71caff22937949b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Logic Flaw in Webpage Tampering Prevention System of Beijing Netnifty Nebula Information Technology Co.
Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...
Weak Password Vulnerability in Netnifty's Web Tampering Prevention System
Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...
Logic Flaw Vulnerability in Netnifty's Web Tampering Prevention System
Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...
Leadsec ACM-Management Platform of Beijing Netnifty Information Technology Co.
Based on the information security field, Netnifty Nebula's business covers network boundary security protection, application and data security protection, network-wide security risk management, professional security solutions and professional security services. Beijing Netnifty Nebula Information...
Command Execution Vulnerability in NetGuard Security Management Platform of Beijing NetGuard Nebula Information Technology Co.
Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...
Information Leakage Vulnerability in SSL VPN of Beijing NetGalaxy Information Technology Co.
Beijing Nethub Information Technology Co., Ltd. was renamed from Lenovo Nethub Technology Beijing Co., Ltd. and its business covers network border security protection, application and data security protection, network-wide security risk management, professional security solutions and professional...
Nebula - Cloud C2 Framework, Which At The Moment Offers Reconnaissance, Enumeration, Exploitation, Post Exploitation On AWS
Nebula is a Cloud and hopefully DevOps Penetration Testing framework. It is build with modules for each provider and each functionality. As of April 2021, it only covers AWS, but is currently an ongoing project and hopefully will continue to grow to test GCP, Azure, Kubernetes, Docker, or...
SQL Injection Vulnerability in Graduation Design Sampling and Guidance Management System of Hunan Nebula Network Information Technology Co.
Hunan Nebula Network Information Technology Co., Ltd. was founded in 2016, the company is rooted in the field of higher education, especially higher vocational education in Hunan Province. A SQL injection vulnerability exists in the graduation design sampling and guidance management system of Hun...