CVE-2019-19795

samurai 0.7 has a heap-based buffer overflow in canonpath in util.c via a crafted build file...

SDG Technologies PnPSCADA

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : SDG Technologies Equipment : PnPSCADA Vulnerability : Missing Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to attach various...

Franklin Electric Fueling Systems Colibri

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Franklin Electric Fueling Systems Equipment : Colibri Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration

The advanced persistent threat APT actor known as ToddyCat has been linked to a new set of malicious tools that are designed for data exfiltration, offering a deeper insight into the hacking crew's tactics and capabilities. The findings come from Kaspersky, which first shed light on the adversary...

ToddyCat: Keep calm and check logs

ToddyCat is an advanced APT actor that we described in a previous publication last year. The group started its activities in December 2020 and has been responsible for multiple sets of attacks against high-profile entities in Europe and Asia. Our first publication was focused on their main tools,...

PnPSCADA v2.x - Unauthenticated PostgreSQL Injection Vulnerability

Exploit Title: PnPSCADA v2.x - Unauthenticated PostgreSQL Injection Exploit Author: Momen Eldawakhly Cyber Guy at Samurai Digital Security Ltd Vendor Homepage: https://pnpscada.com/ Version: PnPSCADA cross platforms: v2.x Tested on: Unix CVE : CVE-2023-1934 Proof-of-Concept:...

Elusive ToddyCat APT Targets Microsoft Exchange Servers

An advanced persistent threat APT group, dubbed ToddyCat, is believed behind a series of attacks targeting Microsoft Exchange servers of high-profile government and military installations in Asia and Europe. The campaigns, according to researchers, began in December 2020, and have been largely...

APT ToddyCat

ToddyCat is a relatively new APT actor that we have not been able to relate to other known actors, responsible for multiple sets of attacks detected since December 2020 against high-profile entities in Europe and Asia. We still have little information about this actor, but we know that its main...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

Information Disclosure

samurai is vulnerable to information disclosure. The vulnerability exists due to a NULL pointer dereference in writefile in util.c via a crafted build file...

Denial Of Service (DoS)

samurai is vulnerable to denial of service. It has a NULL pointer dereference in printstatus function in build.c via a crafted build file...

ALPINE-CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

ALPINE-CVE-2021-30219

samurai 1.2 has a NULL pointer dereference in printstatus function in build.c via a crafted build file...

CVE-2021-30219

samurai 1.2 has a NULL pointer dereference in printstatus function in build.c via a crafted build file...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

CVE-2021-30219

samurai 1.2 has a NULL pointer dereference in printstatus function in build.c via a crafted build file...

CVE-2021-30218

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

Null pointer dereference

samurai 1.2 has a NULL pointer dereference in writefile in util.c via a crafted build file...

Null pointer dereference

samurai 1.2 has a NULL pointer dereference in printstatus function in build.c via a crafted build file...

CVE-2021-30219

samurai 1.2 has a NULL pointer dereference in printstatus function in build.c via a crafted build file...