Abused-Legitimate-Services

被滥用的合法服务 合法的第三方平台即服务（PaaS）提供商正越来越多地被威胁行为者利用来开展钓鱼攻击和恶意软件部署。诸如云实例、营销平台、内容分发网络（CDN）和动态 DNS 服务器等 PaaS 提供商已被武器化，用于一系列恶意活动。其中一个关键优势是，它们可用于规避检测系统。这是因为这些服务被预先屏蔽的可能性较低，因为其具有已建立的信任级别和合法使用背景。 博客中的详细分析请见：https://blog.bushidotoken.net/2021/11/leveraging-legitimate-services-for.html 恶意软件活动滥用的合法服务 钓鱼活动滥用的合法服务...

EUVD-2021-26937

Malware in sbrugna...

OESA-2024-1788 glib2 security update

GLib is a bundle of three formerly five low-level system libraries written in C and developed mainly by GNOME. GLib's code was separated from GTK, so it can be used by software other than GNOME and has been developed in parallel ever since. Security Fixes: An issue was discovered in GNOME GLib...

AZL-40400 CVE-2024-34397 affecting package glib for versions less than 2.78.6-1

An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based...

The vulnerability of the OpenShift container application platform, related to errors in verifying certificate authenticity, allows a perpetrator to disguise themselves as a reliable service within the cluster.

The vulnerability of the OpenShift container application platform is related to errors in verifying the authenticity of certificates. Exploiting this vulnerability can allow an attacker to disguise themselves as a reliable service within the cluster...

CVE-2014-6140

IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...

Code injection

IBM Tivoli Endpoint Manager Mobile Device Management MDM before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitrary code via crafted marshalled Ruby objects in cookies to 1 Enrollment and Apple iOS Management...