6781 matches found
CVE-2018-0667
CVE-2018-0667 involves an untrusted search path vulnerability in the installer components of INplc SDK Express 3.08 and earlier and INplc SDK Pro+ 3.08 and earlier. The root cause is a DLL preloading issue that allows an attacker to gain arbitrary code execution with the privileges of the user in...
CVE-2018-16183
CVE-2018-16183 details an unquoted service path vulnerability in Panasonic PCs with pre-installed applications running Windows 7/8/8.1/10 (from Oct 2009 onward). The root cause is services started with unquoted file paths (CWE-428), which could allow local attackers to execute a Trojan horse exec...
CVE-2018-16176
Untrusted search path vulnerability in Installer of Mapping Tool 2.0.1.6 and 2.0.1.7 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-16177
Untrusted search path vulnerability in The installer of Windows 10 Fall Creators Update Modify module for Security Measures tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2018-16182
CVE-2018-16182 concerns an untrusted DLL search path in the installer for MARKET SPEED, affecting Ver.16.4 and earlier. The root cause is insecure DLL loading (CWE-427) that can allow arbitrary code execution with the invoking user’s privileges. Public sources in the connected documents confirm t...
CVE-2018-1888
An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. IBM X-Force ID: 152079...
CVE-2018-1888
IBM i Access for Windows (IBM) vulnerable to CVE-2018-1888 on Windows versions 7.1 and earlier due to an untrusted search path that allows arbitrary code execution via a Trojan horse DLL in the current working directory, related to LoadLibrary. Connected IBM bulletin confirms affected release 7.1...
CVE-2018-1888
An untrusted search path vulnerability in IBM i Access for Windows versions 7.1 and earlier on Windows can allow arbitrary code execution via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function. IBM X-Force ID: 152079...
MobSTSPY Info-Stealing Trojan Goes Global Via Google Play
An Android spyware dubbed MobSTSPY has managed to ride trojanized apps to a widespread, global distribution, mainly via Google Play. The malware masquerades as a legitimate application purporting to be things like flashlights, games and work productivity tools. While it’s not uncommon to come...
CVE-2018-20211
ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws3232.dll file into this new folder, aka DLL Hijacking. NOTE: 8.32 is an obsolete version from 2010 9.x was released starti...
CVE-2018-20211
ExifTool 8.32 allows local users to gain privileges by creating a %TEMP%\par-%username%\cache-exiftool-8.32 folder with a victim's username, and then copying a Trojan horse ws3232.dll file into this new folder, aka DLL Hijacking. NOTE: 8.32 is an obsolete version from 2010 9.x was released starti...
CVE-2018-18629
An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary...
Design/Logic Flaw
An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary...
CVE-2018-18629
An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary...
Sofacy Russia-Linked APT Debuts Fresh Zebrocy Variant
The Zebrocy trojan – a custom downloader malware used by Russia-linked APT Sofacy a.k.a. APT28, Fancy Bear or Sednit – has a new variant. While it’s functionally much the same as its other versions, the new code was written using the Go programming language. The similarities between the new paylo...
Hidden Code in Memes Instruct Malware via Twitter
Remember when memes were little more than satirical images overlaid with text? Not anymore. Researchers have identified a new type of malware that receives instructions via hidden code embedded in memes posted to Twitter. According to researchers, the meme-driven malware is nothing more than a...
A week in security (December 10 – 16)
Last week on Labs, we took a look at some new Mac malware, a collection of various scraped data dumps, the protection of power grids, and how bad actors are using SMB vulnerabilities. Other cybersecurity news Millions affected by Facebook photo API bug: An issue granted third-party apps more acce...
Threat Roundup for Dec. 7 to Dec. 14
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Dec. 07 and Dec. 14. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
Emotet Trojan Detection
The script tries to detect the Emotet Trojan via various known Indicators of Compromise IOC. Note: This script is not running by default as it needs to crawl the target host for various files which puts high load on the target during the scan. Please enable it separately within scripts preference...
Android Trojan Targets PayPal Users
Want to download an Android battery utility app from a third-party Android app store? What could possibly go wrong? Last month researchers downloaded a power management app called “Optimization Android” from an undisclosed third-party app store. What they found was instead of optimizing the phone...