6707 matches found
Threat Round-up for July 28 - August 4
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between July 28 and August 04. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavior characteristic...
WannaCry hero arrested For “creating and distributing Kronos trojan”
By Waqas A couple of hours ago HackRead reported that Marcus Hutchins, a This is a post from HackRead.com Read the original post: WannaCry hero arrested For “creating and distributing Kronos trojan”...
Koadic: An Advanced Windows JScript/VBScript RAT!
PenTestIT RSS Feed All of us know that post-exploitation we need some mechanism to maintain access on the target. One of the most common methods is by installing a trojan. I have tried to maintain a list of similar tools on the malware sources page on this blog. Now, there is a new entrant which...
Design/Logic Flaw
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe...
CVE-2015-8264
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe...
Design/Logic Flaw
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2287
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2279
Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
Design/Logic Flaw
Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S, NFC Port Software Version 5.3.6.7 and earlier for RC-S320, RC-S310/J1C, RC-S310/ED4C, PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer ...
CVE-2017-2288
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2286
Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S, NFC Port Software Version 5.3.6.7 and earlier for RC-S320, RC-S310/J1C, RC-S310/ED4C, PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer ...
CVE-2017-2288
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2279
Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2287
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2286
Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S, NFC Port Software Version 5.3.6.7 and earlier for RC-S320, RC-S310/J1C, RC-S310/ED4C, PC/SC Activator for Type B Ver.1.2.1.0 and earlier, SFCard Viewer ...
CVE-2017-2287
Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2288
Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...
CVE-2017-2287
CVE-2017-2287 affects Sony’s NFC Port Software remover (Ver. 1.3.0.1 and earlier). The issue is an insecure DLL search path (CWE-427) in the DLL loading process, allowing arbitrary code execution with the user’s privileges if exploited. Affected component: NFC Port Software remover executable; ro...
CVE-2017-2279
CVE-2017-2279 affects Tween Ver1.6.6.0 and earlier, with an untrusted DLL search path vulnerability that allows a Trojan-horse DLL to be loaded, granting an attacker privileges via the installer process. The root cause is insecure DLL loading during installation (DLL search path). Impact stated i...