Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware

Fraudulent domains masquerading as Microsoft's Windows 11 download portal are attempting to trick users into deploying trojanized installation files to infect systems with the Vidar information stealer malware. "The spoofed sites were created to distribute malicious ISO files which lead to a Vida...

Trudesk 安全漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.2 that stems from improper privilege management...

Trudesk 安全漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.2 that stems from weak passwords...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou eTong Technology Company. A security vulnerability exists in CmsEasy version 7.7.520211012, which stems from being affected by an arbitrary file read vulnerability. An attacker can exploit the...

Exposure of Sensitive Information to an Unauthorized Actor in Jenkins

In Jenkins before versions 2.44 and 2.32.2, node monitor data could be viewed by low privilege users via the remote API. These included system configuration and runtime information of these nodes SECURITY-343...

Chris Brame Trudesk 安全漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Chris Brame Trudesk 1.2.1, which stems from insecure storage of profile images, leading to the disclosure of sensitive data...

PHOENIX CONTACT RAD-ISM-900-EN-* 安全漏洞

The PHOENIX CONTACT RAD-ISM-900-EN- is a series of wireless modular Ethernet transceivers from PHOENIX CONTACT, Germany. A security vulnerability exists in PHOENIX CONTACT's RAD-ISM-900-EN- devices, which stems from an incorrect validation of integrity check values. An attacker could exploit the...

ftcms 安全漏洞

ftcms is a content management system from ftcms Inc. A security vulnerability exists in ftcms version 2.1 and earlier versions, which can be exploited by attackers to execute arbitrary code...

Microsoft security experts outline next steps after compromise recovery

Who is CRSP? The Microsoft Compromise Recovery Security Practice CRSP is a worldwide team of cybersecurity experts operating in most countries, across both public and private organizations, with deep expertise to secure an environment post-security breach and to help you prevent a breach in the...

PT-2022-2456 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to errors in resource release in the Windows Hyper-V hardware virtualization system, which can allow an attacker to bypass existing security restrictions. This...

Ramda 安全漏洞

Ramda is a utility library for JavaScript programmers. A security vulnerability exists in Ramda version 0.27.0 and prior versions. An attacker could exploit this vulnerability to compromise the integrity or usability of an application by supplying specially crafted objects as arguments to functio...

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS AI business component, which stems from hiaiserver not doing strict legitimacy...

HUAWEI HarmonyOS 资源管理错误漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in the HUAWEI HarmonyOS kernel that stems from a UAF vulnerability in the frame scheduling module, which...

KONGA 安全漏洞

KONGA is a full-featured, open source, multi-user GUI from the Dutch individual developer Panagis Tselentis. A security vulnerability exists in KONGA version v0.14.9 that stems from incorrect access control. An attacker can exploit this vulnerability to elevate privileges via a specially crafted...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek component aee daemon, which stems from a lack of privilege checking, and can be exploited by an attacker to cause a local information disclosure. The following products...

Microsoft launches Defender for Business to help protect small and medium businesses

Happy National Small Business Week1 in the United States! Small and medium businesses SMBs are the bedrock of our economy, representing 90 percent of businesses and more than 50 percent of employment worldwide.2 As we celebrate their innovation and contributions this week, it’s important to...

ShopXO 安全漏洞

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO version 2.2.5 and previous versions of a security vulnerability , the vulnerability stems from the app/install/controller/Index.php in the Add function found to contain the system reinstallation vulnerability...

Wondershare 安全漏洞

Wondershare is a data transfer tool. A security vulnerability exists in Wondershare version 2021-12-06 that stems from a software design flaw. An unauthenticated attacker can communicate via UDP with the InstallAssistService.exe service which runs under SYSTEM privileges and manipulate it to...

Snipe-IT 安全漏洞

Snipe-IT is an open source IT asset/license management system. A security vulnerability exists in Snipe-IT that stems from incorrect access control...

Sonicwall SonicOS 安全漏洞

Sonicwall SonicWall SonicOS is an operating system from Sonicwall, Inc. designed for SonicWall firewall appliances. A security vulnerability exists in Sonicwall SonicOS, which originates from the Content filtering service CFS returning a large 403-numbered forbidden HTTP response message to the...