Purgalicious VBA: Macro Obfuscation With VBA Purging

Malicious Office documents remain a favorite technique for every type of threat actor, from red teamers to FIN groups to APTs. In this blog post, we will discuss "VBA Purging", a technique we have increasingly observed in the wild and that was first publicly documented by Didier Stevens in Februa...

CVE-2020-28949

ArchiveTar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack such as file:// to overwrite files can still succeed. Recent assessments: gwillcox-r7 at January 15, 2021 8:42pm UTC reported: Original advisory and PoC can be found at...

Pear Archive_Tar Injection Vulnerability

Pear ArchiveTar is a Php-based software from the Pear PEAR team that can create and extract tarballs. A security vulnerability exists in ArchiveTar version 1.4.10 and earlier versions, which stems from the :// filename sanitization attack only for phar, so any other stream-wrapper file:// to...

BASETech GE-131 BT-1837836 Information Disclosure Vulnerability

The BASETech GE-131 BT-1837836 is a Wi-Fi IP CCTV camera. An information disclosure vulnerability exists in the BASETech GE-131 BT-1837836. An attacker can exploit the vulnerability to remotely access the video stream via an unrecorded user...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

Design/Logic Flaw

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

Use of an undocumented user in BASETech GE-131 BT-1837836 firmware 20180921 allows remote attackers to view the video stream...

CVE-2020-27558

CVE-2020-27558 concerns BASETech GE-131 BT-1837836 firmware 20180921. Multiple sources (NVD, CNVD, Red Hat, CVE listing) describe an information disclosure vulnerability where an undocumented user allows remote access to the video stream. The issue is a network-accessible flaw in the device’s aut...

Remote Code Execution (RCE)

XStream is vulnerable to remote code execution RCE. The processed stream at unmarshalling time contains type information to recreate the formerly written objects, and new instances are created based on these type information. The vulnerability allows an attacker to manipulate the processed input...

XStream Remote Code Execution Vulnerability (CNVD-2020-63975)

XStream is a lightweight , easy to use open source Java class library of the XStream team , it is mainly used to serialize objects into XML JSON or deserialize objects . A security vulnerability exists in XStream versions prior to 1.4.14 that stems from vulnerability to remote code execution...

CVE-2020-26217

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist i...

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.

CVE-2020-24353

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header...

CVE-2020-24353

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header...

Cross site request forgery (csrf)

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header...

CVE-2020-24353

CVE-2020-24353 affects Pegasystem Pega Platform prior to 8.4.0. The issue is a cross-site scripting (XSS) vulnerability triggered by stream rule parameters used in the request header. Public descriptions consistently cite an XSS risk impacting versions before 8.4.0; the underlying cause is an imp...

CVE-2020-24353

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header...

Cisco Firepower Threat Defense Software Stream Reassembly Bypass (cisco-sa-20190816-ftd-srb)

A stream reassembly bypass vulnerability exists in Cisco Firepower Threat Defense FTD due to improper reassembly of traffic streams. An unauthenticated, remote attacker can exploit this, by sending specially crafted streams through an affected device to bypass filtering and deliver malicious...

ALBA-2020:4834 new packages: gcc-toolset-10-systemtap

GCC Toolset is a compiler toolset that provides recent versions of development tools. GCC Toolset is an Application Stream packaged as a Software Collection. This enhancement update adds the gcc-toolset-10-systemtap packages to AlmaLinux Eneterprise Linux 8. For instructions on usage, see Using G...