CVE-2018-0515

Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0516

The CVE-2018-0516 issue concerns the FLET’S v4 / v6 address selection tool, where an untrusted DLL search path can allow an attacker to load a Trojan horse DLL from an insecure directory. The root cause is a DLL search path vulnerability (CWE-427) in the application/installer. The documented impa...

CVE-2018-0516

Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0515

Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Spam and phishing in 2017

Figures of the year The share of spam in mail traffic came to 56.63%, down 1.68% against 2016. The biggest source of spam remains the US 13.21%. 40% of spam emails were less than 2 KB in size. The most common malware family found in mail traffic was Trojan-Downloader.JS.Sload The Anti-Phishing...

Code execution vulnerability in lyadmin

lyadmin is a set of lightweight general background, using ThinkPHP + Bootstrap3 production, built-in system settings, upload management, rights management, module management, plug-in management and other functions. lyadmin v1.2.0 version of the existence of code execution vulnerabilities ,...

North Korean Malicious Cyber Activity

The Department of Homeland Security DHS and the Federal Bureau of Investigation FBI have identified Trojan malware variants—referred to as HARDRAIN and BADCALL—used by the North Korean government. The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBR...

File Inclusion Vulnerability in Apple CMS v8

Apple CMS is a free cms website builder. Apple CMS v8 suffers from a file inclusion vulnerability, which allows an attacker to obtain a webshell by including local arbitrary files to execute a write trojan file...

File Upload Vulnerability in UCMS Version 1.2

UCMS is a simple open source content management system. There is an arbitrary file upload vulnerability in UCMS version 1.2, which can be exploited by attackers to directly upload script Trojan files and obtain webshell...

Threat Round Up for Feb 2 - Feb 9

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between February 2 and February 9. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior...

Code Execution Vulnerability in SentCMS v3.0.1707

SentCMS website management system is a simple and easy-to-use website management system created by Nanchang Tengshu Technology Co. A code execution vulnerability exists in SentCMS v3.0.1707, which is caused by the system failing to effectively filter data written to cache files. An attacker can u...

Code Execution Vulnerability in LzCMS v1.1.4

LzCMS Lao Zhang Content Management System is a simple blog system made by ThinkPHP+layui. A code execution vulnerability exists in LzCMS v1.1.4, which is due to the system failing to effectively filter data written to cache files. Attackers can use this vulnerability to upload Trojan horse files...

CVE-2018-0517

Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0517

CVE-2018-0517 concerns the installer of Anshin net security for Windows (versions 16.0.1.44 and earlier) and is caused by an insecure DLL search path (CWE-427). Exploitation could allow arbitrary code execution with the privilege of the user running the installer due to loading a Trojan horse DLL...

CVE-2018-0517

Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Cyber Espionage Group Targets Asian Countries With Bitcoin Mining Malware

Security researchers have discovered a custom-built piece of malware that's wreaking havoc in Asia for past several months and is capable of performing nasty tasks, like password stealing, bitcoin mining, and providing hackers complete remote access to compromised systems. Dubbed Operation PZChao...

Code Execution Vulnerability in Rice CMS v5.9.9

DAMI CMS is a free open-source, fast, simple PC station and cell phone station integration integration system, is committed to providing users with simple, fast PC station and smartphone station building solutions. A code execution vulnerability exists in Daimi CMS v5.9.9, which is caused by the...

WinShell Trojan Detection

This host seems to be running WinShell. WinShell is a Trojan Horse which allows an intruder to take the control of the remote computer. An attacker may use it to steal your passwords, modify your data, and prevent you from working properly. C Tenable Network Security, Inc. include"compat.inc";...