CVE-2018-0540

Untrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0540

CVE-2018-0540 affects ViX 2.21.148.0, with an untrusted search path vulnerability that can allow privilege escalation by a Trojan horse DLL located in an unspecified directory (CWE-427). Public sources (JPN/JVN records and CNVD) describe the issue as insecure DLL loading in ViX, potentially enabl...

File Upload Vulnerability in YXCMS V1.4.7 Backend

YXCMS is an efficient website management system built on PHP+MYSQL. A file upload vulnerability exists in the background of YXCMS V1.4.7. An attacker can exploit this vulnerability to upload Trojan horse files to gain control of the web server...

Arbitrary File Editing Vulnerability in isite v2.1.2

ISite enterprise building system is for people who know a little website construction and HTML technology such as enterprise website builders and developed a set of open source free program specifically for enterprise building. ISite v2.1.2 in the existence of arbitrary file editing vulnerability...

Leizi technology station building cms v1.0 there are arbitrary file editing vulnerabilities

Leizi technology station cms is a set of website source program developed independently by Chongqing Leizi technology computer company. Leizi technology station cms v1.0 there are arbitrary file editing vulnerability. The vulnerability is due to the program to edit the file name and write the...

File Upload Vulnerability in Amoy AspCMS v6.5

Amote AspCMS is a content management system based on the ASP language. A file upload vulnerability exists in Taote AspCMS v6.5, which allows an attacker to directly upload asp Trojan horse files to obtain a webshell...

Arbitrary File Editing Vulnerability in SDCMS Version v3.3

SDCMS is a PHP 3-in-1 website management system independently developed by Fireworks Network. SDCMS v3.3 version of the existence of arbitrary file editing vulnerability, the vulnerability stems from the file path to modify the file and the content of the file to be written into the file are not...

A week in security (March 05 – March 11)

Last week on Malwarebytes Labs, we paid homage to several women in tech, including some of our very own, on International Women's Day and shared their stories. We also looked into an adware posing as an Android app that claims to live stream the 2018 Winter Olympics, exposed scammers that go by t...

Cryptomining is all the rage among hackers, as DDoS amplification attacks continue

In this week’s InfoSec news review we’ll dive into cryptomining, get the latest on DDoS amplification, go over recent data breaches, and check out another vendor claiming it can crack iPhones. I, me, mine The freight train that’s cryptomining shows no sign of slowing down, and the cyber security...

CVE-2018-0543

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0543

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0544

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0544

CVE-2018-0544 affects WinShot 1.53a and earlier installers, due to an untrusted DLL search path (CWE-427). An attacker could load a Trojan horse DLL from a directory, executing arbitrary code with the privileges of the user invoking the installer. Reports from JVN indicate the vulnerability is co...

CVE-2018-0544

Untrusted search path vulnerability in WinShot 1.53a and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0543

Untrusted search path vulnerability in Jtrim 1.53c and earlier Installer allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

dayucms v1.527 File Upload Vulnerability

DayuCMS is a free, open source, flexible and simple CMS system. dayucms v1.527 in the file upload vulnerability , the attacker vulnerability by uploading a zip file containing a Trojan horse , the system will automatically decompress , so as to obtain the webshell...

File Inclusion Vulnerability in CmsTop Version v1.0.0.800

CmsTop Popular Edition mainly solves the needs of small and medium-sized local websites, information channels of industrial websites, as well as website publishing and management of online media, institutions, schools and enterprises. CmsTop version 1.0.0.800 has a local file inclusion...

Mobile malware evolution 2017

The year in figures In 2017, Kaspersky Lab detected the following: 5,730,916 malicious installation packages 94,368 mobile banking Trojans 544,107 mobile ransomware Trojans Trends of the year Rooting malware: no surrender For the last few years, rooting malware has been the biggest threat to...