Political-themed actor using old MS Office flaw to drop multiple RATs
A novel threat actor with unclear motives has been discovered running a crimeware campaign which delivers multiple Windows and Android RATs (remote…
Microsoft asks admins to patch PowerShell to fix WDAC bypass
Microsoft has asked system administrators to patch PowerShell 7 against two vulnerabilities allowing attackers to bypass Windows Defender Application Control (WDAC)…
Alchemy CMS 6.0.0 Arbitrary File Upload
Authored by Abdulrahman Alchemy CMS versions 2.x through 6.0.0 suffers from an arbitrary file upload vulnerability. Change Mirror Download #…
How Coinbase Phishers Steal One-Time Passwords
A recent phishing campaign targeting Coinbase users shows thieves are getting cleverer about phishing one-time passwords (OTPs) needed to complete…
Moodle Authenticated Spelling Binary Remote Code Execution
Authored by Brandon Perry | Site metasploit.com Moodle allows an authenticated user to define spellcheck settings via the web interface.…
NSA explains how to avoid dangers of Wildcard TLS Certificates and ALPACA attacks
The NSA issued a technical advisory to warn organizations against the use of wildcard TLS certificates and the […] The…
Cypress Solutions CTM-200/CTM-ONE Hard-Coded Credentials Remote Root
Authored by LiquidWorm | Site zeroscience.mk Cypress Solutions CTM-200/CTM-ONE suffers from a hard-coded credential remote root vulnerability via telnet and…
Cypress Solutions CTM-200 2.7.1 Root Remote OS Command Injection
Authored by LiquidWorm | Site zeroscience.mk Cypress Solutions CTM-200 wireless gateway version 2.7.1 suffers from an authenticated semi-blind OS command…
G Data EndpointProtection Enterprise 17.08.2021 Privilege Escalation
Authored by Florian Bogner G Data EndpointProtection Enterprise version 17.08.2021 suffers from a privilege escalation vulnerability. Change Mirror Download DATA…
Microsoft Office OneNote 2007 Remote Code Execution
Authored by Eduardo Braun Prado Microsoft Office OneNote 2007 proof of concept exploit for a OnePKG file parsing remote code…