Lucene search
+L

8729 matches found

The Hacker News
The Hacker News
•added 2023/01/12 2:46 p.m.•20 views

IcedID Malware Strikes Again: Active Directory Domain Compromised in Under 24 Hours

A recent IcedID malware attack enabled the threat actor to compromise the Active Directory domain of an unnamed target less than 24 hours after gaining initial access, while also borrowing techniques from other groups like Conti to meet its goals. "Throughout the attack, the attacker followed a...

7AI score
SaveExploits0
Citrix
Citrix
•added 2023/01/12 12:00 a.m.•17 views

App Layering - PVS Connector with Offload Enabled - Task Error "404 (Not Found)"

App Layering PVS connector with offload enabled "An unexpected system error occurred. Retry the operation or contact technical support. Exception Message: Response status code does not indicate success: 404 Not Found"...

7.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2023/01/11 5:15 p.m.•20 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.8AI score0.00171EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/11 5:15 p.m.•34 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.3AI score0.00171EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/11 5:15 p.m.•40 views

Design/Logic Flaw

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

1.9CVSS5.3AI score0.00171EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/11 4:32 p.m.•20 views

CVE-2022-4457 WARP client manifest misconfiguration leading to Task Hijacking

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS6.4AI score0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/01/11 4:32 p.m.•40 views

CVE-2022-4457 WARP client manifest misconfiguration leading to Task Hijacking

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.5AI score0.00171EPSS
SaveExploits0References1
CVE
CVE
•added 2023/01/11 4:32 p.m.•92 views

CVE-2022-4457

The CVE-2022-4457 issue concerns the WARP client for Android, where a misconfiguration in the app manifest enables a task hijacking attack. This could let a malicious app hijack legitimate apps and potentially exfiltrate sensitive data when installed on a victim’s device. Documented details acros...

5.5CVSS5.3AI score0.00171EPSS
SaveExploits0References1Affected Software1
AlpineLinux
AlpineLinux
•added 2023/01/11 4:32 p.m.•69 views

CVE-2022-4457

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.4AI score0.00171EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2023/01/11 2:24 p.m.•54 views

Australian Healthcare Sector Targeted in Latest Gootkit Malware Attacks

A recent wave of Gootkit malware loader attacks has targeted the Australian healthcare sector by leveraging legitimate tools like VLC Media Player. Gootkit, also called Gootloader, is known to employ search engine optimization SEO poisoning tactics aka spamdexing for initial access. It typically...

1.7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2023/01/11 12:00 a.m.•63 views

Microsoft Windows Multiple Vulnerabilities (KB5022352)

This host is missing an important security update according to Microsoft KB5022352 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.1CVSS7.2AI score0.34206EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/01/11 12:00 a.m.•23 views

PT-2023-14506 · Unknown · Warp Client For Android

Name of the Vulnerable Software and Affected Versions: WARP client for Android affected versions not specified Description: The issue is caused by a misconfiguration in the manifest file of the WARP client for Android, allowing a task hijacking attack. An attacker can create a malicious mobile...

5.5CVSS5.1AI score0.00171EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/01/11 12:00 a.m.•22 views

Cloudflare WARP security vulnerabilities

Cloudflare WARP Cloudflare Vpn is a client application for secure connections from Cloudflare, Inc. in the United States. Cloudflare WARP suffers from a security vulnerability that stems from a misconfiguration in its client's manifest file that could allow an attacker to implement execution task...

5.5CVSS6AI score0.00171EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/11 12:00 a.m.•8 views

CVE-2022-4457: Exposure of Sensitive Information to an Unauthorized Actor

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's...

5.5CVSS5.8AI score0.00171EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/01/10 10:15 p.m.•17 views

CVE-2023-21541

Windows Task Scheduler Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00577EPSS
SaveExploits0References3Affected Software25
NVD
NVD
•added 2023/01/10 10:15 p.m.•28 views

CVE-2023-21541

Windows Task Scheduler Elevation of Privilege Vulnerability...

7.8CVSS8.1AI score0.00577EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/01/10 10:15 p.m.•13 views

CVE-2023-21541

Windows Task Scheduler Elevation of Privilege Vulnerability...

7.8CVSS7.1AI score0.00577EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/10 10:15 p.m.•25 views

Privilege escalation

Windows Task Scheduler Elevation of Privilege Vulnerability...

4.3CVSS7.7AI score0.00577EPSS
SaveExploits0References1Affected Software3
Talos Blog
Talos Blog
•added 2023/01/10 7:18 p.m.•74 views

Microsoft Patch Tuesday for January 2023 — Snort rules and prominent vulnerabilities

Microsoft released its monthly security update on Tuesday, disclosing 98 vulnerabilities. Of these vulnerabilities, 11 are classified as "Critical", 87 are classified as "Important", no vulnerability classified as "Moderate." According to Microsoft all "Critical" vulnerability are either less...

1.1AI score0.65417EPSS
SaveExploits13
Microsoft CVE
Microsoft CVE
•added 2023/01/10 8:00 a.m.•172 views

Windows Task Scheduler Elevation of Privilege Vulnerability

...

7.8CVSS8.1AI score0.00577EPSS
SaveExploits0
Rows per page
Query Builder