DigiTrack

DigiTrack 在30秒内，这种攻击可以获知MacOS电脑之前连接过哪些网络，并植入一个脚本，每隔60秒追踪当前的IP地址和Wi-Fi网络。 现在包含：Hardtracker - Digispark VPN破坏者，用于将MacOS电脑上附近Wi-Fi网络的IP地址和BSSID/SSID每隔60秒发送到Grabify追踪器。 这是一个价值5美元的攻击工具，可以做到以下几件事： 1. 在受害者电脑上植入Wi-Fi后门，使你在Wi-Fi范围内时能够随时捕获受害者的数据连接。 2. 窃取受害者曾经连接过的所有网络列表（用于追踪、分类和劫持数据连接） 3...

EUVD-2023-28091

Malicious code in bioql PyPI...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

ASUS RT-AC86U OS Command Injection Vulnerability

The ASUS RT-AC86U is a dual-band Wi-Fi router from Asus China. The ASUS RT-AC86U suffers from an operating system command injection vulnerability that stems from insufficient filtering of special characters by the adaptive QoS network history feature...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

Design/Logic Flaw

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

CVE-2023-24027

CVE-2023-24027 affects MISP 2.4.167 with an XSS issue in app/webroot/js/action_table.js triggered via a network history name. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, base score 6.1 (Medium). It requires user interaction and has network attack vector; impact concerns c...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

MISP 跨站脚本漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A cross-site scripting vulnerability exists in MISP version 2.4.167. An attacker exploits...

CVE-2023-24027

In MISP 2.4.167, app/webroot/js/actiontable.js allows XSS via a network history name...

Microsoft Windows Wireless Network History

Using the supplied credentials, this plugin reports wireless networks that this computer has connected to as well as the settings for Windows Vista and later systems. %NASLMINLEVEL 5200 C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66350; scriptversion"1.8";...