188 matches found
Design/Logic Flaw
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application the default installation makes the webserver run as the root user...
CVE-2023-22577 White Rabbit Switch - Password Disclosure Vulnerability
Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings...
CVE-2023-22581 White Rabbit Switch - Unauthenticated remote code execution
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application the default installation makes the webserver run as the root user...
CVE-2023-22577
The CVE-2023-22577 issue affects White Rabbit Switch, where an unauthenticated user can retrieve sensitive information (password hashes and SNMP community strings). Connected sources consistently describe information disclosure as the impact. Root cause details are not explicitly provided in the ...
CVE-2023-22577 White Rabbit Switch - Password Disclosure Vulnerability
Within White Rabbit Switch it's possible as an unauthenticated user to retrieve sensitive information such as password hashes and the SNMP community strings...
CVE-2023-22581 White Rabbit Switch - Unauthenticated remote code execution
White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application the default installation makes the webserver run as the root user...
CVE-2023-22581
CVE-2023-22581 affects White Rabbit Switch. The vulnerability enables an attacker to execute system commands within the web application context because the default installation runs the webserver as root. The CVSS 3.1 metrics indicate a Critical impact (HIGH for confidentiality, integrity, and av...
White Rabbit Switch 安全漏洞
The White Rabbit Switch WRS is an open hardware design from the OPEN HARDWARE organization. A security vulnerability exists in White Rabbit Switch. An attacker could exploit the vulnerability to execute system commands in the context of a web application...
PT-2023-18561 · Unknown · White Rabbit Switch
Name of the Vulnerable Software and Affected Versions: White Rabbit Switch affected versions not specified Description: The issue allows an unauthenticated user to retrieve sensitive information, including password hashes and SNMP community strings. Recommendations: At the moment, there is no...
PT-2023-18566 · Unknown · White Rabbit Switch
Name of the Vulnerable Software and Affected Versions: White Rabbit Switch affected versions not specified Description: The issue allows an attacker to perform system commands under the context of the web application. By default, the web server runs as the root user, which can be exploited...
White Rabbit Switch 安全漏洞
The White Rabbit Switch WRS is an open hardware design from the OPEN HARDWARE organization. A security vulnerability exists in White Rabbit Switch. An attacker exploiting this vulnerability could retrieve sensitive information such as password hashes and SNMP community strings...
SUSE CVE-2008-5008
Buffer overflow in src/srcsinc.c in Secret Rabbit Code aka SRC or libsamplerate before 0.1.4, when "extreme low conversion ratios" are used, allows user-assisted attackers to have an unknown impact via a crafted audio file...
Malicious code in mongo.rabbit.bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef04fad2f4cc89e04245dbb8e3687a649270fe37322fcdb204d24c2a54398277 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Conti Leaks: Examining the Panama Papers of Ransomware | Trellix
Conti Leaks: Examining the Panama Papers of Ransomware By John Fokker, Jambul Tologonov · March 31, 2022 Introduction It isn’t often the whole world gets an inside look of the business operations of a top tier cybercriminal group. Very early on in the Russian-Ukrainian Crisis the predominantly...
FIN8 Hacker group using new ‘White Rabbit’ Ransomware against U.S. Banks
THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. White Rabbit is a ransomware family that has only recently been discovered. It could be a subsidiary project of the FIN8 hacking gang. A ransomware expert seeking for a sample of the malware made the first public disclosure...
FIN8 Hackers Spotted Using New 'White Rabbit' Ransomware in Recent Attacks
The financially motivated FIN8 actor, in all likelihood, has resurfaced with a never-before-seen ransomware strain called "White Rabbit" that was recently deployed against a local bank in the U.S. in December 2021. That's according to new findings published by Trend Micro, calling out the malware...
New ‘White Rabbit’ Ransomware May Be New FIN8 Tool
A new ransomware family, White Rabbit, chewed through a local U.S. bank last month — and it may be connected to the financially motivated advanced persistent threat APT group known as FIN8, researchers said. In a Tuesday report, Trend Micro researchers said that this twicky wabbit knows how to...
New Ransomware Spotted: White Rabbit and Its Evasion Tactics
We analyze the ransomware White Rabbit and bring into focus the familiar evasion tactics employed by this newcomer...
The vulnerability of the RabbitMQ messaging broker’s Java framework and Apache Camel allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the RabbitMQ Java framework of Apache Camel broker is related to the recovery of unreliable data structures in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
Heatmiser Netmonitor 3.03 - HTML Injection Vulnerability
Exploit for hardware platform in category web applications Exploit Title: Heatmiser Netmonitor 3.03 - HTML Injection Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.heatmiser.com/en/ Hardware Link: https://www.zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf Software: Netmonitor...