2181 matches found
The vulnerability of Sielco PolyEco1000 digital FM transmitter’s microprogramming software lies in the insufficient limitation on authentication attempts, allowing a intruder to gain full control over the system.
The vulnerability of Sielco PolyEco1000 digital FM transmitter’s microprogramming software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the system...
PT-2023-10707 · Abus · Abus Tvip Cameras
Name of the Vulnerable Software and Affected Versions: ABUS TVIP cameras affected versions not specified Description: The issue allows attackers to gain control of the program via a crafted string sent to the sprintf function. This is a Buffer Overflow vulnerability in certain ABUS TVIP cameras...
Malicious code in envision-config (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 04e466892f76c4ace03350c7ce2ac6600e0ec4196b1d0bc3dea64be89cf7ffcb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 Denial Of Service Vulnerability
VIMESA VHF/FM Transmitter Blue Plus version 9.7.1 suffers from a denial of service vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint doreboot and restart the transmitter operations. VIMESA VHF/FM Transmitter Blue Plus 9.7.1 doreboot...
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 Denial Of Service
VIMESA VHF/FM Transmitter Blue Plus 9.7.1 doreboot Remote Denial Of Service Vendor: Video Medios, S.A. VIMESA Product web page: https://www.vimesa.es Affected version: img:v9.7.1 Html:v2.4 RS485:v2.5 Summary: The transmitter Blue Plus is designed with all the latest technologies, such as high...
Kimsuky Unveils New Addition to Its Malware Arsenal
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Kimsuky, a cyber-espionage group, is known for infiltrating via spear-phishing attacks, and is recognized for its versatility in using various types of malware and tools to facilitate remote control durin...
Unpatched Zero-Day Vulnerability Actively Exploited in Cisco IOS XE
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The critical, unpatched security vulnerability identified as CVE-2023-20198 affects Cisco IOS XE software. Cisco IOS XE is a network operating system used in Cisco network devices. The identified...
CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks
The Computer Emergency Response Team of Ukraine CERT-UA has revealed that threat actors "interfered" with at least 11 telecommunication service providers in the country between May and September 2023. The agency is tracking the activity under the name UAC-0165, stating the intrusions led to servi...
CVE-2023-38312
A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client with remote control access to a game server to read arbitrary files from the underlying server via the motdfile console variable...
Directory traversal
A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client with remote control access to a game server to read arbitrary files from the underlying server via the motdfile console variable...
CVE-2023-38312
A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client with remote control access to a game server to read arbitrary files from the underlying server via the motdfile console variable...
CVE-2023-38312
CVE-2023-38312 affects Valve Counter-Strike 8684: a directory traversal via the motdfile console variable allows a client with remote access to read arbitrary server files. Root cause: directory traversal vulnerability in the game server component. Impact: potential exposure of sensitive server f...
Researchers Uncover Malware Posing as WordPress Caching Plugin
Cybersecurity researchers have shed light on a new sophisticated strain of malware that masquerades as a WordPress plugin to stealthily create administrator accounts and remotely control a compromised site. "Complete with a professional looking opening comment implying it is a caching plugin, thi...
Tinycontrol LAN Controller v3 (LK3) 1.58a - Remote Admin Password Change
!/bin/bash : " Exploit Title: Tinycontrol LAN Controller v3 LK3 1.58a - Remote Admin Password Change Exploit Author: LiquidWorm Vendor: Tinycontrol Product web page: https://www.tinycontrol.pl Affected version: this with a calendar when - then. The device provides a user interface in the form of ...
Cisco Releases Security Advisories for Multiple Products
Cisco released security advisories for vulnerabilities affecting multiple Cisco products. A remote cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the necessa...
Electron_Shell - Developing A More Covert Remote Access Trojan (RAT) Tool By Leveraging Electron's Features For Command Injection And Combining It With Remote Control Methods
Electronshell Developing a more covert Remote Access Trojan RAT tool by leveraging Electron's features for command injection and combining it with remote control methods. Read More: AOH 024探索将Shell寄生于Electron程序的自动化实现 Features Supports almost all operating systems mac linux windows Supports almost...
Cisco Releases Security Advisories for Multiple Products
Cisco has released security advisories for vulnerabilities affecting multiple Cisco products. A remote cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following advisories and apply the...
The vulnerability of the BASupSrvc service (BASupSrvcUpdater.exe), a software component for remote control of computers and devices in the N-able Take Control system, allows a malicious individual to gain access to read, modify, or delete files.
The vulnerability of the BASupSrvc service BASupSrvcUpdater.exe, a software for remote control of computers and devices in the N-able Take Control system, is related to state management errors caused by creating an incorrect symbolic link in the C:\ProgramData\GetSupportServiceN-Central\PushUpdat...
PT-2023-8872 · Uniview · Uniview Ip Camera
Name of the Vulnerable Software and Affected Versions: Uniview IP Camera affected versions not specified Description: The issue is related to identification and authentication failure at the web-based management interface of Uniview IP Camera. A remote attacker could exploit this by sending...
Syrian Threat Actor EVLF Unmasked as Creator of CypherRAT and CraxsRAT Android Malware
A Syrian threat actor named EVLF has been outed as the creator of malware families CypherRAT and CraxsRAT. "These RATs are designed to allow an attacker to remotely perform real-time actions and control the victim device's camera, location, and microphone," Cybersecurity firm Cyfirma said in a...