4193 matches found
Microsoft Windows PowerShell 安全漏洞
Microsoft Windows PowerShell is a command line shell program and scripting environment from Microsoft Corporation USA that enables command line users and script writers to take advantage of the power of . A security vulnerability exists in Microsoft Windows PowerShell. An attacker could exploit t...
CVE-2024-38046: Improper Input Validation
PowerShell Elevation of Privilege Vulnerability...
CVE-2023-36756
creationtimestamp| type| source ---|---|--- 2024-09-05 15:39:37+00:00| seen| https://www.thezdi.com/blog/2024/9/4/exploiting-exchange-powershell-after-proxynotshell-part-1-multivaluedproperty 2024-09-12 15:00:00+00:00| seen|...
Gather electerm Passwords
This module will determine if electerm is installed on the target system and, if it is, it will try to dump all saved session information from the target. The passwords for these saved sessions will then be decrypted where possible. Module Options msf use post/multi/gather/electerm msf postelecte...
New LummaC2 Malware Variant Uses PowerShell, Obfuscation to Steal Data
Ontinue has discovered a new LummaC2 malware variant with increased activity, using PowerShell for initial infection and employing…...
PEAKLIGHT Downloader Deployed in Attacks Targeting Windows with Malicious Movie Downloads
Cybersecurity researchers have uncovered a never-before-seen dropper that serves as a conduit to launch next-stage malware with the ultimate goal of infecting Windows systems with information stealers and loaders. "This memory-only dropper decrypts and executes a PowerShell-based downloader,"...
New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data
The threat actors behind a recently observed Qilin ransomware attack have stolen credentials stored in Google Chrome browsers on a small set of compromised endpoints. The use of credential harvesting in connection with a ransomware infection marks an unusual twist, and one that could have cascadi...
CERT-UA Warns of New Vermin-Linked Phishing Attacks with PoW Bait
The Computer Emergency Response Team of Ukraine CERT-UA has warned of new phishing attacks that aim to infect devices with malware. The activity has been attributed to a threat cluster it tracks as UAC-0020, which is also known as Vermin. The exact scale and scope of the attacks are presently...
Iranian Cyber Group TA453 Targets Jewish Leader with New AnvilEcho Malware
Iranian state-sponsored threat actors have been observed orchestrating spear-phishing campaigns targeting a prominent Jewish figure starting in late July 2024 with the goal of delivering a new intelligence-gathering tool called AnvilEcho. Enterprise security company Proofpoint is tracking the...
New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions
An ongoing, widespread malware campaign has been observed installing rogue Google Chrome and Microsoft Edge extensions via a trojan distributed via fake websites masquerading as popular software. "The trojan malware contains different deliverables ranging from simple adware extensions that hijack...
The vulnerability of the PowerShell command line interface on Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the PowerShell command line interface on Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the PowerShell command line interface on Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the PowerShell command line interface on Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the PowerShell command line interface on Windows operating systems, which allows attackers to exploit their privileges
The vulnerability of the PowerShell command line interface on Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2024-23464
In certain cases, Zscaler Internet Access ZIA can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows 4.2.1...
CVE-2024-23464
In certain cases, Zscaler Internet Access ZIA can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows 4.2.1...
CVE-2024-23464 Zscaler bypass with administrative privileges on Windows
In certain cases, Zscaler Internet Access ZIA can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows 4.2.1...
CVE-2024-23464
CVE-2024-23464 affects Zscaler Client Connector on Windows prior to 4.2.1. The issue is described as improper preservation of permissions, enabling an attacker with admin rights to run PowerShell commands that can disable Zscaler Internet Access (ZIA) covered by the affected client. The vulnerabi...
CVE-2024-23464 Zscaler bypass with administrative privileges on Windows
In certain cases, Zscaler Internet Access ZIA can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows 4.2.1...
PT-2024-19887
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector versions prior to 4.2.1 Description The issue allows Zscaler Internet Access ZIA to be disabled by PowerShell commands with admin rights. Recommendations For versions prior to 4.2.1, update to version 4.2.1 or later to...
With the PVS console installed, PowerShell cmdlets targeting On-Prem DDCs prompt for cloud login
On a server with the PVS console installed, executing CVAD cmdlets targeting on-prem DDCs e.g. Get-BrokerSite -AdminAddress will encounter popups prompting for Citrix Cloud sign-on...