RA World Ransomware Attack in South Asia Links to Chinese Espionage Toolset

An RA World ransomware attack in November 2024 targeting an unnamed Asian software and services company involved the use of a malicious tool exclusively used by China-based cyber espionage groups, raising the possibility that the threat actor may be moonlighting as a ransomware player in an...

PT-2024-35186 · Ra Qrcode · Ra Qrcode

Name of the Vulnerable Software and Affected Versions: ra qrcode versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For versions n...

The vulnerability of the `ip6_ra_control` function in the `net/ipv6/ipv6_sockglue.c` component of the Linux kernel, related to pointer dereferencing errors, allows a malicious actor to trigger a service failure.

The vulnerability of the ip6racontrol function in the net/ipv6/ipv6sockglue.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

FAS - The RA certificate expiry notification is not displayed in the Cloud console

When the FAS Registration AuthorityRA certificate expires, the RA certificate expiry notification is not displayed in the Citrix Cloud management console...

RHSA-2009:1065 Red Hat Security Advisory: rhpki-ra security update

Bulletin has no description...

MAL-2024-3936 Malicious code in wdpr-ra-appdynamics-node (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in wdpr-ra-appdynamics-node (npm)

--- -= Per source details. Do not edit below this line.=-...

ra-seubert.de Cross Site Scripting vulnerability OBB-3900465

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

Multiple threat actors are exploiting the recently disclosed security flaws in JetBrains TeamCity software to deploy ransomware, cryptocurrency miners, Cobalt Strike beacons, and a Golang-based remote access trojan called Spark RAT. The attacks entail the exploitation of CVE-2024-27198 CVSS score...

BIT-EJBCA-2020-28942

An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. As a part of EJBCA's domain security model, the peer connector allows the restriction of client certificates for the RA, not the end user to a limited set of allowed CAs, th...

Malicious code in wdpr-ra-node-csp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f84a83ea13684761bce489c49b762047ea5f7cb2d68aa8e38f64842cbf224840 The OpenSSF Package Analysis project identified 'wdpr-ra-node-csp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-100 Malicious code in wdpr-ra-node-csp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f84a83ea13684761bce489c49b762047ea5f7cb2d68aa8e38f64842cbf224840 The OpenSSF Package Analysis project identified 'wdpr-ra-node-csp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

A decryptor for the Tortilla variant of the Babuk ransomware has been released by Cisco Talos, allowing victims targeted by the malware to regain access to their files. The cybersecurity firm said the threat intelligence it shared with Dutch law enforcement authorities made it possible to arrest...

ra-roecken.de Improper Access Control vulnerability OBB-3820197

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ra-schwendinger.at Improper Access Control vulnerability OBB-3781316

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ra-mill.de Improper Access Control vulnerability OBB-3780095

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ra-alvo.de Improper Access Control vulnerability OBB-3777097

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ra-heyl.de Improper Access Control vulnerability OBB-3772646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ra-seubert.de Improper Access Control vulnerability OBB-3770693

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ra-zimmermanns.de Improper Access Control vulnerability OBB-3768708

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...