609 matches found
SolarMarker Malware Uses Novel Techniques to Persist on Hacked Systems
In a sign that threat actors continuously shift tactics and update their defensive measures, the operators of the SolarMarker information stealer and backdoor have been found leveraging stealthy Windows Registry tricks to establish long-term persistence on compromised systems. Cybersecurity firm...
Dune Foresaw—and Influenced—Half a Century of Global Conflict
From Afghanistan to cyberattacks, Frank Herbert’s novel anticipated and shaped warfare as we know it...
Mccms has a file upload vulnerability
Mccms is a comic + novel system developed using the Ci framework as its core. Mccms has a file upload vulnerability that can be exploited by attackers to gain control of the server...
GHSA-GWRJ-88FP-5M36 Code injection in Narou
Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...
Code injection in Narou
Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...
Narou Code Injection Vulnerability
Narou is a novel publishing site by an individual Japanese developer. Narou suffers from a code injection vulnerability in versions prior to 3.8.0 that allows an attacker to inject Ruby code via the title name or author name of a novel. An attacker could use this vulnerability to inject code to...
CVE-2021-35514
Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...
CVE-2021-35514
Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...
Code injection
Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...
CVE-2021-35514
Narou aka Narou.rb before 3.8.0 allows Ruby Code Injection via the title name or author name of a novel...
CVE-2021-35514
Narou (aka Narou.rb) up to version 3.8.0 is vulnerable to Ruby code injection via the title or author name fields of a novel. The underlying issue is untrusted code execution through these inputs, enabling code execution on the affected system. Affected software: Narou.rb (Ruby-based Narou). Root...
Command Execution Vulnerability in Little Raccoon Novel cms (CNVD-2021-47134)
Little Raccoon Novel CMS is open source novel CMS with attitude, based on thinkphp 6.0 development. Little Raccoon novel cms there is a command execution vulnerability , an attacker can exploit the vulnerability to obtain server control privileges...
Little Raccoon Novel cms has file upload vulnerability
Little Raccoon Novel CMS is open source novel CMS with attitude, based on thinkphp 6.0 development. Little Raccoon novel cms file upload vulnerability , attackers can use the vulnerability to obtain server control privileges...
Novel ‘Victory’ Backdoor Spotted in Chinese APT Campaign
An ongoing surveillance operation has been uncovered that targets a Southeast Asian government, researchers said – using a previously unknown espionage malware. According to Check Point Research, the attack involves spear-phishing emails with malicious Word documents to gain initial access, along...
Command Execution Vulnerability in Yisou Novel App
Yisou Novel APP is a professional mobile novel search and reading client. A command execution vulnerability exists in Yisou Novel APP. An attacker can exploit the vulnerability to execute commands on the server...
Command Execution Vulnerability in Wild Rain Novel cms (CNVD-2021-40730)
Wild Rain Fiction CMS provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL. Raining Novels cms has a command execution vulnerability that can be exploited by attackers to gain server privileges...
Arbitrary File Deletion Vulnerability in Wild Rain Novel cms (CNVD-2021-40731)
Wild Rain Fiction CMS provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL. Rain Novel cms arbitrary file deletion vulnerability , an attacker can use the vulnerability to delete arbitrary files...
2021 Attacker Dwell Time Trends and Best Defenses
Cyberattacks have shifted from the usual smash-and-grab type of heists to stealthier campaigns where hackers silently camp out on networks for long periods, stealing anything they can get their hands on. Called attacker dwell time, this is part of an adversarial approach that has become even more...
SQL Injection Vulnerability in Rainy Novel cms 1.3.2
Wild Rain Fiction cms hereinafter referred to as KYXSCMS is a content management system that provides a lightweight fiction website solution based on ThinkPHP 5.1 MySQL technology. A SQL injection vulnerability exists in Drizzle Novel cms 1.3.2, which can be exploited by attackers to obtain...