Microsoft Windows SMBv3 Client/Server code execution | CVE-2022-24508
NAME Microsoft Windows SMBv3 Client/Server code execution Platforms Affected:Microsoft Windows 10 20H2 for 32-bit Systems Microsoft Windows 10 20H2 for...
Month: March 2022
Mozilla Firefox, Firefox ESR, Firefox for Android, Focus, Thunderbird code execution | CVE-2022-26485
NAME Mozilla Firefox, Firefox ESR, Firefox for Android, Focus, Thunderbird code execution Platforms Affected:Mozilla Firefox 97.0.1 Mozilla Firefox ESR 91.6...
Microsoft Exchange Server code execution | CVE-2022-23277
NAME Microsoft Exchange Server code execution Platforms Affected:Microsoft Exchange Server 2016 CU21 Microsoft Exchange Server 2016 CU22 Microsoft Exchange Server...
Microsoft Windows Remote Desktop Client code execution | CVE-2022-21990
NAME Microsoft Windows Remote Desktop Client code execution Platforms Affected:Microsoft Windows 7 SP1 x32 Microsoft Windows 7 SP1 x64 Microsoft...
Microsoft Azure Site Recovery privilege escalation | CVE-2022-24469
NAME Microsoft Azure Site Recovery privilege escalation Platforms Affected:Microsoft Azure Site RecoveryRisk Level:8.1Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Microsoft Azure Site Recovery could...
SAP Focused Run privilege escalation | CVE-2022-24396
NAME SAP Focused Run privilege escalation Platforms Affected:SAP Focused RunRisk Level:9.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION SAP Focused Run could allow a local...
SAP Fiori launchpad cross-site scripting | CVE-2022-26101
NAME SAP Fiori launchpad cross-site scripting Platforms Affected:SAP Fiori Launchpad 754 SAP Fiori Launchpad 755 SAP Fiori Launchpad 756Risk Level:8.2Exploitability:HighConsequences:Cross-Site...
Icinga Web 2 directory traversal | CVE-2022-24715
NAME Icinga Web 2 directory traversal Platforms Affected:Icinga Icinga Web 2 2.8.5 Icinga Icinga Web 2 2.9.5 Icinga Icinga Web...
Samsung data breach: Lapsus$ gang stole Galaxy devices’ source code
Samsung confirmed that threat actors had access to the source code of its Galaxy smartphones in recent security breach. Samsung...
Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilities
Microsoft March 2022 Patch Tuesday security updates address 89 vulnerabilities in multiple products, including 3 zero-days. Microsoft March 2022 Patch...
Conti Ransomware Victim: https-www-myron-co
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
Conti Ransomware Victim: https-www-greathealthworks-co
continews NOTE: The information on this page is automated and scraped directly from the Conti .onion Dark Web Tor Blog...
New RURansom Wiper Targets Russia
We analyze RURansom, a malware variant discovered to be targeting Russia. Originally suspected to be a ransomware because of its...
US-CERT Bulletin (SB22-066):Vulnerability Summary for the Week of February 28, 2022
The CISA Vulnerability Bulletin provides a summary of new vulnerabilities that have been recorded by the National Institute of Standards...
Google TAG: Russia, Belarus-linked APTs targeted Ukraine
Google TAG observed Russian, Belarusian, and Chinese threat actors targeting Ukraine and European government and military orgs. Google Threat Analysis...
GONET-Scanner – Golang Network Scanner With Arp Discovery And Own Parser
ScreenShots Install chmod +x install.sh./install.sh Usage ARP Discovery -ar CIDR -s: Scan ports in all hosts discovered -ap: Scan to...
Access:7 flaws impact +150 device models from over 100 manufacturers
Many IoT and medical devices are affected by seven serious flaws, collectively tracked as Access:7, in widely used Axeda platform....
CISA urges to fix actively exploited Firefox zero-days by March 21
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added recently disclosed Firefox zero-days to its Known Exploited Vulnerabilities Catalog. The Cybersecurity...
Ragnar Locker ransomware group breached at least 52 organizations across 10 critical infrastructure sectors
The US FBI warns that the Ragnar Locker ransomware gang has breached the networks of at least 52 organizations from...
Ukraine’s CERT-UA warns of phishing attacks against Ukrainian citizens
Ukraine’s CERT-UA warned citizens of new phishing attacks launched through compromised email accounts belonging to Indian entities. Ukraine’s Computer Emergency...
GraphQL Cop – Security Auditor Utility For GraphQL APIs
GraphQL Cop is a small Python utility to run common security tests against GraphQL APIs. Requirements Python3 Requests Library Detections...
Cobalt Stike Beacon Detected – 39[.]101[.]136[.]68:8009
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 15[.]152[.]186[.]38:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 118[.]194[.]233[.]133:81
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
