The US offers a $10M rewards for info on the Conti ransomware gang’s members
The U.S. State Department announced a $10 million reward for information related to five individuals associated with the Conti ransomware gang. The...
Month: August 2022
HackerOne Bug Bounty Disclosure: reflected-xss-at-https://stories-showmax-com/wp-content/themes/theme-internal_ss/blocks/ajax/a-php-via-`ss_country_filter`-parambymiron666
Programme HackerOne Showmax Showmax Submitted by miron666 miron666 Report Reflected XSS at https://stories.showmax.com/wp-content/themes/theme-internal_ss/blocks/ajax/a.php via `ss_country_filter` param Full Report A considerable...
OffensiveVBA – Code Execution And AV Evasion Methods For Macros In Office Documents
In preparation for a VBS AV Evasion Stream/Video I was doing some research for Office Macro code execution methods and...
Cobalt Stike Beacon Detected – 1[.]13[.]23[.]211:7443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 185[.]82[.]217[.]19:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 160[.]20[.]145[.]111:8443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 34[.]92[.]131[.]12:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 124[.]223[.]65[.]106:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]142[.]145[.]126:8099
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]100[.]207[.]236:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 193[.]201[.]9[.]123:8080
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 194[.]135[.]24[.]247:443
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 43[.]138[.]229[.]110:80
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 5[.]42[.]199[.]46:53
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 192[.]236[.]147[.]191:6666
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 47[.]109[.]29[.]37:7777
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Cobalt Stike Beacon Detected – 120[.]53[.]242[.]18:4433
The Information provided at the time of posting was detected as "Cobalt Strike". Depending on when you are viewing this...
Zoom Client for Meetings for MacOS privilege escalation | CVE-2022-28751
NAME Zoom Client for Meetings for MacOS privilege escalation Platforms Affected:Zoom Client for Meetings for MacOS 5.11Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION...
Gumstix Overo SBC on the VSKS board security bypass | CVE-2022-38161
NAME Gumstix Overo SBC on the VSKS board security bypass Platforms Affected:Gumstix Overo SBCRisk Level:8.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION Gumstix Overo SBC...
Keysight Sensor Management Server (SMS) code execution | CVE-2022-38130
NAME Keysight Sensor Management Server (SMS) code execution Platforms Affected:Keysight Sensor Management Server (SMS) 2.4.0Risk Level:9.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Keysight Sensor...
Zoom On-Premise Meeting Connector MMR security bypass | CVE-2022-28754
NAME Zoom On-Premise Meeting Connector MMR security bypass Platforms Affected:Zoom On-Premise Meeting Connector MMR 4.8Risk Level:8.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION Zoom On-Premise...
Adobe Premiere Elements privilege escalation | CVE-2022-34235
NAME Adobe Premiere Elements privilege escalation Platforms Affected:Adobe Premiere Elements 2022 20.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Adobe Premiere Elements could allow...
Experts warn of mass exploitation of an RCE flaw in Zimbra Collaboration Suite
Threat actors are exploiting an authentication bypass Zimbra flaw, tracked as CVE-2022-27925, to hack Zimbra Collaboration Suite email servers worldwide. An authentication bypass...
BazarCall attacks have revolutionized ransomware operations
The Conti ransomware gang is using BazarCall phishing attacks as an initial attack vector to access targeted networks. BazarCall attack,...
