Month: October 2021

CVE-2021-3796

October 23, 2021

Summary: vim is vulnerable to Use After Free Reference Links(if available): https://github.com/vim/vim/commit/35a9a00afcb20897d462a766793ff45534810dc3 https://huntr.dev/bounties/ab60b7f3-6fb1-4ac2-a4fa-4d592e08008d http://www.openwall.com/lists/oss-security/2021/10/01/1 https://lists.fedoraproject.org/archives/list/[email protected]/message/TE62UMYBZE4AE53K6OBBWK32XQ7544QM/ https://lists.fedoraproject.org/archives/list/[email protected]/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/ CVSS Score (if available)...

CVE-2021-3796

October 23, 2021

CVE-2021-3872

October 23, 2021

Summary: vim is vulnerable to Heap-based Buffer Overflow Reference Links(if available): https://github.com/vim/vim/commit/826bfe4bbd7594188e3d74d2539d9707b1c6a14b https://huntr.dev/bounties/c958013b-1c09-4939-92ca-92f50aa169e8 https://lists.fedoraproject.org/archives/list/[email protected]/message/S42L4Z4DTW4LHLQ4FJ33VEOXRCBE7WN4/ CVSS Score (if available) v2: /...

CVE-2020-1648

October 23, 2021

Summary: On Juniper Networks Junos OS and Junos OS Evolved devices, processing a specific BGP packet can lead to a...

Supply-chain attack on NPM Package UAParser, which has millions of daily downloads

October 23, 2021

The U.S. CISA warned of crypto-mining malware hidden in a popular JavaScript NPM library, named UAParser.js, which has millions of weekly downloads....

CoinMarketCap – 3,117,548 breached accounts

October 23, 2021

During October 2021, 3.1 million email addresses with accounts on the cryptocurrency market capitalisation website CoinMarketCap were discovered being traded...

SubCrawl – A Modular Framework For Discovering Open Directories, Identifying Unique Content Through Signatures And Organizing The Data With Optional Output Modules, Such As MISP

October 23, 2021

SubCrawl is a framework developed by However, if this UI is not sufficient for the subsequent evaluation of the data,...

Facebook SSRF Dashboard allows hunting SSRF vulnerabilities

October 23, 2021

Facebook developed a new tool that allows security experts to look for Server-Side Request Forgery (SSRF) vulnerabilities in their software....

Groove ransomware group calls on other ransomware gangs to hit US public sector

October 22, 2021

Groove ransomware operators call on other ransomware groups to stop competing and join the forces to fight against the US....

DarkSide ransomware operators move 6.8M worth of Bitcoin after REvil shutdown

October 22, 2021

Darkside and BlackMatter ransomware operators have moved a large amount of their Bitcoin reserves after the recent shutdown of REvil’s...

Ransomware: Why do backups fail when you need them most?

October 22, 2021

It’s widely known, and endlessly repeated, that the last, best line of defence against the potentially devastating effects of a...

We dig into the Game Players Code

October 22, 2021

Gaming security is getting a lot of attention at the moment. Rightly so; it’s a huge target for scammers and...

CVE-2021-24581

October 22, 2021

Summary: The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in...

CVE-2021-24684

October 22, 2021

Summary: The WordPress PDF Light Viewer Plugin WordPress plugin before 1.4.12 allows users with Author roles to execute arbitrary OS...

CVE-2021-35039

October 22, 2021

Summary: kernel/module.c in the Linux kernel before 5.12.14 mishandles Signature Verification, aka CID-0c18f29aae7c. Without CONFIG_MODULE_SIG, verification that a kernel module...

CVE-2021-41971

October 22, 2021

Summary: Apache Superset up to and including 1.3.0 when configured with ENABLE_TEMPLATE_PROCESSING on (disabled by default) allowed SQL injection when...

CVE-2021-41152

October 22, 2021

Summary: OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system. In...

A bug is about to confuse a lot of computers by turning back time 20 years

October 22, 2021

For those of you that remember the fuss about the Y2K bug, this story may sound familiar. The Cybersecurity &...

PortBender – TCP Port Redirection Utility

October 22, 2021

PortBender is a TCP port redirection utility that allows a red team operator to redirect inbound traffic destined for one...

FIN7 cybercrime gang creates fake cybersecurity firm to recruit pentesters for ransomware attacks

October 22, 2021

FIN7 hacking group created fake cybersecurity companies to hire experts and involve them in ransomware attacks tricking them of conducting...

FiveSys, a new digitally-signed rootkit spotted by Bitdefender experts

October 22, 2021

Bitdefender researchers discovered a new Rootkit named FiveSys that abuses Microsoft-Issued Digital Signature signature to evade detection. FiveSys is a...

Evil Corp rebrands their ransomware, this time is the Macaw Locker

October 22, 2021

Evil Corp cybercrime gang is using a new ransomware called Macaw Locker to evade US sanctions that prevent victims from...

A flaw in WinRAR could lead to remote code execution

October 21, 2021

A vulnerability in the WinRAR is a trialware file archiver utility for Windows could be exploited by a remote attacker...

PEASS-ng – Privilege Escalation Awesome Scripts SUITE new generation

October 21, 2021

Basic TutorialHere you will find privilege escalation tools for Windows and Linux/Unix* and MacOS.These tools search for possible local privilege...

Month: October 2021

CVE-2021-3796

CVE-2021-3796

CVE-2021-3872

CVE-2020-1648

Supply-chain attack on NPM Package UAParser, which has millions of daily downloads

CoinMarketCap – 3,117,548 breached accounts

SubCrawl – A Modular Framework For Discovering Open Directories, Identifying Unique Content Through Signatures And Organizing The Data With Optional Output Modules, Such As MISP

Facebook SSRF Dashboard allows hunting SSRF vulnerabilities

Groove ransomware group calls on other ransomware gangs to hit US public sector

DarkSide ransomware operators move 6.8M worth of Bitcoin after REvil shutdown

Ransomware: Why do backups fail when you need them most?

We dig into the Game Players Code

CVE-2021-24581

CVE-2021-24684

CVE-2021-35039

CVE-2021-41971

CVE-2021-41152

A bug is about to confuse a lot of computers by turning back time 20 years

PortBender – TCP Port Redirection Utility

FIN7 cybercrime gang creates fake cybersecurity firm to recruit pentesters for ransomware attacks

FiveSys, a new digitally-signed rootkit spotted by Bitdefender experts

Evil Corp rebrands their ransomware, this time is the Macaw Locker

A flaw in WinRAR could lead to remote code execution

PEASS-ng – Privilege Escalation Awesome Scripts SUITE new generation

[BIANLIAN] – Ransomware Victim: Silverback Exploration

[FOG] – Ransomware Victim: Fifteenfortyseven Critical Systems Realty (1547realty[.]com)

[BIANLIAN] – Ransomware Victim: Kellerhals Ferguson Kroblin PLLC

[FOG] – Ransomware Victim: Hogan Mfg (hoganmfg[.]com)

[QILIN] – Ransomware Victim: DMF Lighting

You may have missed