Digitally Signed Bandook Malware Once Again Targets Multiple Sectors

A cyberespionage group with suspected ties to the Kazakh and Lebanese governments has unleashed a new wave of attacks against a multitude of industries with a retooled version of a 13-year-old backdoor Trojan. Check Point Research called out hackers affiliated with a group named Dark Caracal in a...

SQL Injection Vulnerability in MetInfo Backend of Changsha Mito Information Technology Co.

MetInfo is an open source free CMS building system suitable for enterprise building. Changsha Mito Information Technology Co., Ltd. MetInfo backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

File Upload Vulnerability in Microconsultation Communication System of Beijing Zhongwang Network Technology Co. Ltd (CNVD-2020-72364)

MicroMessage is an open, lightweight, cross-platform unified communications system. A file upload vulnerability exists in the communication system of Beijing Zhongwang Network Technology Co., Ltd, which can be exploited by an attacker to obtain server control privileges...

Chengdu Enable Technology Co., Ltd Vocational College Smart Campus Platform Has Logic Flaw Vulnerability

Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. A logic flaw vulnerability exists in the Vocational College Smart Campus Platform of Chengdu Enable Technology Co. An attacker can exploit the vulnerability to cause all...

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or to...

Beat Cybercriminals at Their Own Game

The fight against cybercrime never ends, but there’s a valuable resource that can give you an advantage—continuous research into the vulnerabilities across your diverse technology infrastructure. Get a leg up in the vulnerability race with our guide...

The vulnerability of the DHCP subsystem of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM) allows attackers to disclose protected information.

The vulnerability of the DHCP subsystem of Intel Active Management Technology AMT and Intel Standard Manageability ISM exists due to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Chengdu Enable Technology Co., Ltd. Enable Smart Campus Platform Has Logic Flaw Vulnerability

Chengdu Enable Technology Co., Ltd. is a high-tech enterprise and software enterprise in education informatization industry. A logic flaw vulnerability exists in the Enable Smart Campus platform of Chengdu Enable Technology Co. An attacker can exploit the vulnerability to cause all sites using th...

Binary Vulnerability in TP Manager, HMI Software from Tengen Controls

The HMI software TP Manager is a software product of TENGCONTROL TECHNOLOGY China. A binary vulnerability exists in TP Manager, which can be exploited by attackers to cause a denial of service...

SQL Injection Vulnerability in TEMMOKUMVC of Pizhou Tianmu Network Technology Co.

TEMMOKUMVC is Pizhou Tianmu Network Technology Co., Ltd. developed a professional PHP + MYSQL products, using the independent MVC framework for large and small and medium-sized enterprises of the open source MVC. Pizhou Tianmu Network Technology Co., Ltd TEMMOKUMVC SQL injection vulnerability,...

Security Bulletin: IBM Resilient SOAR is Using Components with Known Vulnerabilities - IBM SDK, Java Technology Edition v8.0.6.11

Summary There are multiple vulnerabilities associated with IBM jdk 8.0.6.11 as listed below: Vulnerability Details CVEID: CVE-2020-14583 DESCRIPTION: An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause low confidentiality...

Intel Active Management Technology Access Control Error Vulnerability

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. An Access Control Error vulnerability exists in Intel Active Management Technology versions prior to 1.3.3, which arises from a network system or product that...

Intel AMT Input Validation Error Vulnerability (CNVD-2020-66304)

Intel AMT is an Intel Intel company that resides in hardware that allows remote management functions to be performed. Intel AMT suffers from an input validation error vulnerability that allows privilege escalation to be enabled via local access. No details of the vulnerability are available at th...

Intel AMT and Intel ISM Buffer Overflow Vulnerabilities

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A security vulnerability exists in Intel AMT and Intel ISM that stems from an out-of-bounds read-in subsystem that could allow an unauthenticated user to...

Election Cyber Threats in the Asia-Pacific Region

In democratic societies, elections are the mechanism for choosing heads of state and policymakers. There are strong incentives for adversary nations to understand the intentions and preferences of the people and parties that will shape a country's future path and to reduce uncertainty about likel...

Intel Converged Security Management Engine (CSME) Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391)

Binary data wmiINTEL-SA-00391.nbin...

Intel Active Management Technology (AMT) Multiple Vulnerabilities (INTEL-SA-00391) (remote check)

The Intel Management Engine on the remote host has Active Management Technology AMT enabled, and, according to its self-reported, is a version containing multiple vulnerabilities, including the following: - Out-of-bounds write in IPv6 subsystem for IntelR AMT, IntelR ISM versions before 11.8.80,...

VMware Workspace Security: A Major Leap Towards Unified Endpoint Mobility & Security

The rate of change in the way people work, driven by the need to work remotely, has exacerbated IT and security concerns. And this change in the way we work is likely to be permanent as organizations see performance benefits resulting from the remote work environment. New work expectations have...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2020 - Includes Oracle Apr 2020 CPU minus CVE-2020-2773 affects IBM MQ

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Version 7 and 8 used by IBM MQ. IBM MQ have addressed the applicable CVEs. These issues were disclosed as part of the IBM Java SDK updates in April 2020. Vulnerability Details CVEID: CVE-2020-2781 DESCRIPTION: An unspecifi...