Iron Tiger Compromises Chat Application Mimi, Targets Windows, Mac, and Linux Users

We found APT group Iron Tiger's malware compromising chat application Mimi’s servers in a supply chain attack...

WordPress Mitsol Social Post Feed plugin <= 1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Big Tiger in WordPress Mitsol Social Post Feed plugin versions = 1.10. Solution Deactivate and delete. This plugin has been closed as of and is not available for download. Reason: Security Issue...

berkano:bean-displaytag (>=20050615.234814 <=20050616.015551), berkano:berkano-util (>=20050725.114415 <=dev-20050723) +28 more potentially affected by CVE-2007-4556 via opensymphony:xwork (>=1.0.3 <=1.2.2)

opensymphony:xwork MAVEN version =1.0.3, =20050615.234814, =20050725.114415, =2.1.5, =1.1.3, =1.0-alpha-1, =1.1-beta-1, =1.1-beta-1, =1.0-beta-2, =1.0-beta-3 - org.codehaus.jet:jet-web-engine =1.0-beta-2 and more Source cves: CVE-2007-4556 Source advisory: OSV:GHSA-H7MF-QRM9-2848...

WordPress ProfileGrid plugin <= 4.7.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Big Tiger in WordPress ProfileGrid plugin versions = 4.7.4. Solution Update the WordPress ProfileGrid plugin to the latest available version at least 4.7.5...

WordPress Mitsol Social Post Feed plugin <= 1.10 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Big Tiger in WordPress Mitsol Social Post Feed plugin versions = 1.10. Solution Deactivate and delete. This plugin has been closed as of March 14, 2022 and is not available for download. This closure is temporary, pending a full review...

EoL Systems Stonewalling Log4j Fixes for Fed Agencies

Last month, federal agencies were given a Christmas Eve deadline – Dec. 24 – to address the “extremely concerning” Log4j and other vulnerabilities. Nobody said it would be easy. Besides the difficulty of tracking down all instances of the ubiquitous Apache logging library, the job of patching the...

Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware

This blog details how Iron Tiger threat actors have updated their toolkit with an updated SysUpdate malware variant that now uses five files in its infection routine instead of the usual three...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03444)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03451)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03443)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03446)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03445)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03450)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03448)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03452)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03447)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability (CNVD-2021-03449)

Tiger Live is a live content streaming software dedicated to a variety of entertainment, gaming, handheld games, and third-party push streams. Tiger Tooth Live PC client has a dll hijacking vulnerability that can be exploited by attackers to execute malicious code...

Tiger Tooth Live PC client suffers from dll hijacking vulnerability

Tiger Tooth Live PC Client is a game live streaming tool. The Tiger Tooth Live PC Client suffers from a dll hijacking vulnerability that stems from incorrect handling of runtime directory paths. An attacker can exploit this vulnerability by placing a malicious DLL file in a specific location on t...

Tiger Tooth Live PC Extreme Client suffers from dll hijacking vulnerability

Tiger Tooth Live PC Extreme Client is a game live streaming software. Tiger Tooth Live PC Extreme Client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to gain control of the server...

USN-4628-2: Intel Microcode regression | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 14.04 Canonical Ubuntu 16.04 Description USN-4628-1 provided updated Intel Processor Microcode. Unfortunately, that update prevented certain processors in the Intel Tiger Lake family from booting successfully. This update...