JSSLoader: the shellcode edition

The Malwarebytes Threat Intelligence team observed a malspam campaign in late June that we attribute to the FIN7 APT group. One of the samples was also reported on Twitter by Josh Trombley; during execution, it was observed to drop a secondary payload, written in .NET. Details about FIN7 campaign...

unpopskc.brownpapertickets.com Cross Site Scripting vulnerability OBB-2832643

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

paper-replika.com Cross Site Scripting vulnerability OBB-2828480

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

brownpaperpackages.com Cross Site Scripting vulnerability OBB-2825811

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5209 Malicious code in paper-toolbar (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67e54c851a1a002db9d6f77e8c5afb5d967ca7df824f482e2e44c51aeb9ab9e5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Intel® Processors Return Stack Buffer Underflow Advisory

Summary: A potential security vulnerability in some Intel® Processors may allow information disclosure. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-29901 Description: Non-transparent sharing of branch predictor targets...

gatheringasheville.brownpapertickets.com Cross Site Scripting vulnerability OBB-2692487

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kidstable.brownpapertickets.com Cross Site Scripting vulnerability OBB-2671413

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview paper-toolbar is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

New Research Paper: Pre-hijacking Attacks on Web User Accounts

In 2020, MSRC awarded two Identity Project Research Grants to support external researchers working to further strengthen the security of identity protocols and systems. Today we are pleased to release the results of the first of these projects. This research, led by independent security researche...

Friday Squid Blogging: Squid Filmed Changing Color for Camouflage Purposes

Video of oval squid Sepioteuthis lessoniana changing color in reaction to their background. The research paper claims this is the first time this has been documented. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog...

FirmWire -b Full-System Baseband Firmware Emulation Platform For Fuzzing, Debugging, And Root-Cause Analysis Of Smartphone Baseband Firmwares

FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images. See theFirmWire documentation to get started! Experiments & Missing Parts? Upon a vendor's request, the current...

Friday Squid Blogging: Squid Skin–Inspired Insulating Material

Interesting: Drawing inspiration from cephalopod skin, engineers at the University of California, Irvine invented an adaptive composite material that can insulate beverage cups, restaurant to-go bags, parcel boxes and even shipping containers. … "The metal islands in our composite material are ne...

ResearchGate Automatic Question Paper Generator System SQL Injection Vulnerability

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

CVE-2022-26631

Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter...

CVE-2022-26631

Automatic Question Paper Generator v1.0 contains a Time-Based Blind SQL injection vulnerability via the id GET parameter...

CVE-2022-26631

CVE-2022-26631 affects the Automatic Question Paper Generator v1.0. The vulnerability is a time-based blind SQL injection exploitable through the id parameter in GET requests, enabling an attacker to infer data from the database. The issue is documented across multiple sources (NVD entry and seve...

ResearchGate Automatic Question Paper Generator System SQL注入漏洞

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

ResearchGate Automatic Question Paper Generator System Cross-Site Scripting Vulnerability

ResearchGate Automatic Question Paper Generator System 1.0 is an automatic question paper generation system from ResearchGate, a German company. A cross-site scripting vulnerability exists in the account page component /aqpg/users/login.php, where the last name parameter lacks a validation filter...