winsos-poc

WinSOS تستخدم هذه التقنية الملفات التنفيذية الموجودة داخل مجلد WinSxS، الذي عادةً ما تثق به Windows، لاستغلال أسلوب اختطاف ترتيب بحث DLL الكلاسيكي. ومن خلال الاستفادة من هذه الملفات التنفيذية، يمكن لجهات التهديد تنفيذ تعليمات برمجية ضارة داخل تطبيقات Windows دون الحاجة إلى صلاحيات مرتفعة. تلغي هذ...

Chromium extension uses AI‑related branding to redirect browser search

In this article 1. Extension overview 2. Key indicators of malicious behavior 3. Dynamic analysis findings 4. Mitigation and protection guidance 5. References 6. Learn more Microsoft Threat Intelligence has identified a malicious Chromium-based extension that spoofs the AI-powered answer engine...

DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide

The threat actor behind two malicious browser extension campaigns, ShadyPanda and GhostPoster, has been attributed to a third attack campaign codenamed DarkSpectre that has impacted 2.2 million users of Google Chrome, Microsoft Edge, and Mozilla Firefox. The activity is assessed to be the work of...

CVE-2023-53937

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...

Take back control of your browser—Malwarebytes Browser Guard now blocks search hijacking attempts

Search hijacking, often referred to as browser hijacking, occurs when cybercriminals modify users’ browser settings without their consent. This often results in users being redirected to potentially malicious websites, such as fake customer service offerings. Search hijacking commonly happens...

JetBrains IntelliJ IDEA 代码问题漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.2.2, which stems from the vulnerability of the installer to an EXE search command...

Opera Browser Multiple Vulnerabilities-02 July-11 (Linux)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnlin02jul11.nasl 5912 2017-04-10 09:01:51Z teissa $ Opera Browser Multiple Vulnerabilities-02 July-11 Linux Authors: Madhuri D Copyright: Copyright c 2012 Greenbone...

Opera < 11.10 Multiple Vulnerabilities

Binary data 800862.prm...

Opera Browser Multiple Vulnerabilities (Jul 2011) - Windows

Opera browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Code injection

Opera before 11.10 allows remote attackers to hijack 1 searches and 2 customizations via unspecified third party applications...

CVE-2011-2634: Improper Input Validation

Opera before 11.10 allows remote attackers to hijack 1 searches and 2 customizations via unspecified third party applications...

Gumblar: The malware that is sweeping the nation

The latest large-scale malware outbreak to hit the Web, known variously as Gumblar and Geno and Martuz, is a multi-stage attack that not only infects compromised machines with a number of separate pieces of malware but also has the ability to steal credentials and block the victim from taking...

Exploiting the Google toolbar &#40;GM#001-MC&#41;

GreyMagic Security Advisory GM001-MC ===================================== By GreyMagic Software, Israel. 08 Aug 2002. Available in HTML format at http://security.greymagic.com/adv/gm001-mc/. Topic: Exploiting the Google toolbar. Discovery date: 31 Jul 2002. Affected applications:...