PJSIP security bypass | CVE-2022-39269
NAME PJSIP security bypass Platforms Affected:PJSIP PJSIP 2.12.1 PJSIP PJSIP 2.11Risk Level:9.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION PJSIP could allow a remote attacker...
Month: October 2022
ZoneMinder cross-site request forgery | CVE-2022-39290
NAME ZoneMinder cross-site request forgery Platforms Affected:ZoneMinder ZoneMinder 1.36.26 ZoneMinder ZoneMinder 1.37.23Risk Level:8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION ZoneMinder is vulnerable to cross-site...
Fortinet FortiTester command execution | CVE-2022-33873
NAME Fortinet FortiTester command execution Platforms Affected:Fortinet FortiTester 3.8.0 Fortinet FortiTester 3.7.0 Fortinet FortiTester 2.3.0 Fortinet FortiTester 7.1.0 Fortinet FortiTester...
Fortinet FortiTester command execution | CVE-2022-33874
NAME Fortinet FortiTester command execution Platforms Affected:Fortinet FortiTester 3.8.0 Fortinet FortiTester 3.7.0 Fortinet FortiTester 2.3.0 Fortinet FortiTester 7.1.0 Fortinet FortiTester...
Tesla Model 3 privilege escalation | CVE-2022-42431
NAME Tesla Model 3 privilege escalation Platforms Affected:Tesla Model 3Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Tesla Model 3 could allow a local...
Fortinet FortiTester command execution | CVE-2022-33872
NAME Fortinet FortiTester command execution Platforms Affected:Fortinet FortiTester 3.8.0 Fortinet FortiTester 3.7.0 Fortinet FortiTester 2.3.0 Fortinet FortiTester 7.1.0 Fortinet FortiTester...
Samsung Mobile devices buffer overflow | CVE-2022-39852
NAME Samsung Mobile devices buffer overflow Platforms Affected:Samsung Q 10 Samsung R 11 Samsung S 12Risk Level:8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Samsung...
Fortinet FortiOS, FortiProxy and FortiSwitchManager security bypass | CVE-2022-40684
NAME Fortinet FortiOS, FortiProxy and FortiSwitchManager security bypass Platforms Affected:Fortinet FortiOS 7.0.0 Fortinet FortiOS 7.0.2 Fortinet FortiOS 7.0.1 Fortinet FortiProxy...
Node.js tiny-csrf module information disclosure | CVE-2022-39287
NAME Node.js tiny-csrf module information disclosure Platforms Affected:Node.js tiny-csrf 1.0.3 Node.js tiny-csrf 1.0.2 Node.js tiny-csrf 1.0.1 Node.js tiny-csrf 1.0.0Risk Level:8.1Exploitability:UnprovenConsequences:Obtain...
Trend Micro Apex One privilege escalation | CVE-2022-41746
NAME Trend Micro Apex One privilege escalation Platforms Affected:Trend Micro Apex One On Premise (2019) Trend Micro Apex One SaaSRisk...
Fortinet FortiTester brute force | CVE-2022-35846
NAME Fortinet FortiTester brute force Platforms Affected:Fortinet FortiTester 3.8.0 Fortinet FortiTester 3.7.0 Fortinet FortiTester 2.3.0 Fortinet FortiTester 7.1.0 Fortinet FortiTester...
Fortinet FortiOS command execution | CVE-2021-44171
NAME Fortinet FortiOS command execution Platforms Affected:Fortinet FortiOS 6.0.1 Fortinet FortiOS 6.0.4 Fortinet FortiOS 6.0.3 Fortinet FortiOS 6.0.2 Fortinet FortiOS...
DeepFakes Are The Cybercriminal Economy’s Latest Business Line
California-based Resecurity has identified a new spike of underground services enabling bad actors to generate deepfakes. According to cybersecurity experts,...
Toyota discloses accidental leak of some customers’ personal information
Toyota Motor Corporation discloses data leak, customers’ personal information may have been exposed after an access key was exposed on...
Daily Vulnerability Trends: Tue Oct 11 2022
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2022-2992 No description provided CVE-2022-41082 No description provided CVE-2022-35914/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed...
Malware Analysis – evasion – 4d9b79704383a9c91295e8b746413b7c
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4d9b79704383a9c91295e8b746413b7cSHA1: 6f8008aca295b27636440ba6fe6c7c00d4da540dANALYSIS DATE: 2022-10-11T02:16:14ZTTPS: T1082, T1091, T1491, T1112, T1060, T1088, T1089, T1042,...
Malware Analysis – evasion – 63046690aa304bd6d153754cdfca619d
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 63046690aa304bd6d153754cdfca619dSHA1: b0c9ab1908dd7ebbae385162a18a70f14e80c4faANALYSIS DATE: 2022-10-11T02:16:20ZTTPS: T1082, T1012, T1120, T1112, T1088, T1089, T1490, T1158,...
Malware Analysis – evasion – 54f83062d5b8fc0c06d7c2405e5148a7
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 54f83062d5b8fc0c06d7c2405e5148a7SHA1: c8e5138f52a6b9c84d08ec7ac3ade1dd0c28b91bANALYSIS DATE: 2022-10-11T02:16:18ZTTPS: T1082, T1004, T1112, T1042, T1060, T1012, T1120, T1088,...
Malware Analysis – evasion – 4e16b89abda6e2c6ed4cfc6ab067c787
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 4e16b89abda6e2c6ed4cfc6ab067c787SHA1: 20fe9e4e35bc1ce62027dbad8ddfb02996d1e009ANALYSIS DATE: 2022-10-11T02:16:16ZTTPS: T1491, T1112, T1490, T1012, T1120, T1082, T1088, T1089,...
Malware Analysis – evasion – 638c63b0a53008552b6874b864937c91
Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: 638c63b0a53008552b6874b864937c91SHA1: fcc9a964814e2c20ceff4b3bd9ffc9fa6f0b0d77ANALYSIS DATE: 2022-10-11T02:16:22ZTTPS: T1060, T1112, T1158, T1091, T1042, T1082, T1088, T1089,...
Malware Analysis – djvu – bba9587a1586f818e4dcb95e037e45f3
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: bba9587a1586f818e4dcb95e037e45f3SHA1: d46356d5818a1c690b253593aad01608acbd6887ANALYSIS DATE: 2022-10-11T03:05:09ZTTPS: T1082, T1053, T1005, T1081,...
Malware Analysis – – 64517c4b5f0089776f0d50fc83bc04d0
Score: 6 MALWARE FAMILY: TAGS:MD5: 64517c4b5f0089776f0d50fc83bc04d0SHA1: 58179ce1e79bfc11bc14539a2ddfeeda86433284ANALYSIS DATE: 2022-10-11T02:51:48ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or...
Malware Analysis – djvu – 6cc8f230328fc32cb709b946eb8284fc
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:redline, family:smokeloader, family:vidar, botnet:517, botnet:buildnewdomain, backdoor, collection, discovery, infostealer, persistence, ransomware, spyware, stealer, trojanMD5: 6cc8f230328fc32cb709b946eb8284fcSHA1:...
Malware Analysis – – d7a8ed45514ee6d11436052bc368ec8c
Score: 1 MALWARE FAMILY: TAGS:MD5: d7a8ed45514ee6d11436052bc368ec8cSHA1: ee927c33d8c83e1c3fad5672dec1ffaebae9b050ANALYSIS DATE: 2022-10-11T03:22:51ZTTPS: ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne or more known damaging...
