107 matches found
Guyana Governmental Entity Hit by DinodasRAT in Cyber Espionage Attack
A governmental entity in Guyana has been targeted as part of a cyber espionage campaign dubbed Operation Jacana. The activity, which was detected by ESET in February 2023, entailed a spear-phishing attack that led to the deployment of a hitherto undocumented implant written in C++ called...
The vulnerability of the Dynamic DNS (DDNS) function of the SoftEther VPN client allows a hacker to execute arbitrary code.
The vulnerability of the Dynamic DNS DDNS function in the SoftEther VPN client client involves the possibility of buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by performing a “man-in-the-middle” attack...
JVN#64316789: Multiple vulnerabilities in SoftEther VPN and PacketiX VPN
SoftEther VPN provided by University of Tsukuba SoftEther VPN Project and PacketiX VPN provided by SoftEther Corporation contain multiple vulnerabilities listed below in VPN Client function, and Dynamic DNS Client function included in the VPN server. Heap-based buffer overflow CWE-122 -...
PT-2023-8738 · Softether · Softether Vpn
Name of the Vulnerable Software and Affected Versions: SoftEther VPN versions 4.41-9782-beta through 5.02 Description: A denial of service issue exists in the DCRegister functionality of SoftEther VPN, related to the DDNS RPC MAX RECV SIZE. This can be triggered by a specially crafted network...
Code injection
See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to...
CVE-2019-11868
CVE-2019-11868 affects SoftEther VPN Server with See.sys up to v4.25 (v4.29 or older). The issue allows a user to call an IOCTL that can specify any kernel address, enabling arbitrary bytes to be written to that address. This is described in multiple sources (NVD/Red Hat) as a local ability to wr...
