Aggregator

AgentHopper: An AI Virus

Embrace The Red
2 months 1 week ago
As part of the Month of AI Bugs, serious vulnerabilities that allow remote code execution via indirect prompt injection were discovered. There was a period of a few weeks where multiple arbitrary code execution vulnerabilities existed in popular agents, like GitHub Copilot, Amazon Q, AWS Kiro,… During that time I was wondering if it would be possible to write an AI virus. Hence the idea of AgentHopper was born.

AgentHopper: An AI Virus Research Project

不安全
2 months 1 week ago
本文介绍了AgentHopper项目，一种基于AI的恶意软件概念验证。通过利用GitHub Copilot等工具中的漏洞，该恶意软件可自动传播并感染开发者的代码库。研究展示了AI工具的安全风险，并提供了防护建议。

CVE-2023-48409

CVE Trends
2 months 1 week ago
Currently trending CVE - Hype Score: 16 - In gpu_pixel_handle_buffer_liveness_update_ioctl of private/google-modules/gpu/mali_kbase/mali_kbase_core_linux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. ...

Computer Networking Projects

不安全
2 months 1 week ago
一个Reddit社区r/netsecstudents为网络安全学生提供资源分享、问题解答和互助学习的平台。一位用户询问是否有其他学生愿意分享课程大纲和实验室项目，以帮助他准备CCNA考试并获取更多实验思路。

U.S. Government Seizes Online Marketplaces Used to Sell Fraudulent Identity Documents to Cybercriminals

Cyber Security News
2 months 1 week ago

The U.S. Attorney’s Office for the District of New Mexico announced Thursday that federal authorities have executed a court-authorized seizure of two domain names and one affiliated blog associated with VerifTools, an online marketplace peddling counterfeit driver’s licenses, passports, and other state- and country-issued identity documents.  Operating under the banner of VerifTools since 2020, the […]

The post U.S. Government Seizes Online Marketplaces Used to Sell Fraudulent Identity Documents to Cybercriminals appeared first on Cyber Security News.

Guru Baran

Revenge AI • support us ⭐️

不安全
2 months 1 week ago
Revenge AI 是一个基于 AI 的云逆向工程平台，通过智能模型和算法提前分析并阻止威胁。与昂贵的传统工具不同，该 SaaS 平台按需付费，提供更准确的结果和高效决策支持。

Album#0 - Live at Revolution Hall

不安全
2 months 1 week ago
作者分享了一篇关于音乐的系列文章，介绍了他喜欢的专辑和歌曲，并以七夕为主题推荐了Adrianne Lenker的《born for loving you (live)》，展现了专辑的现场感与温暖氛围。

IOC Alert: apk.hook Botnet C2

Dark Web Informer - Cyber Threat Intelligence
2 months 1 week ago

📖 Overview
A new domain-based indicator has been identified linked to botnet command-and-control infrastructure for apk.hook (HookBot). The domain, hosted under Hetzner (AS24940), is tied to ERMAC v3.0 activity and represents a high-confidence threat to Android devices targeted by banking trojans.

📌 Key Details

FieldInformationTypeDomain
Dark Web Informer

CVE-2002-2106 | WikkiTikkiTavi 0.5/0.10/0.20 conflict.php TemplateDir privileges management (EDB-21241 / ID 10627)

Vuldb Updates
2 months 1 week ago
A vulnerability was found in WikkiTikkiTavi 0.5/0.10/0.20. It has been rated as critical. This affects an unknown part of the file conflict.php. This manipulation of the argument TemplateDir causes improper privilege management. This vulnerability is tracked as CVE-2002-2106. The attack is possible to be carried out remotely. Moreover, an exploit is present. Upgrading the affected component is advised.
vuldb.com

CVE-2002-2109 | Matt Wright FormMail up to 1.9 Referer Checker HTTP_REFERER authentication spoofing (ID 10476 / XFDB-8012)

Vuldb Updates
2 months 1 week ago
A vulnerability labeled as critical has been found in Matt Wright FormMail up to 1.9. Impacted is an unknown function of the component Referer Checker. Executing manipulation of the argument HTTP_REFERER can lead to authentication bypass by spoofing. This vulnerability is registered as CVE-2002-2109. It is possible to launch the attack remotely. No exploit is available.
vuldb.com

CVE-2002-2114 | Artekopia Netjuke up to 1.0 B6 eval section privileges management (ID 10532 / XFDB-8101)

Vuldb Updates
2 months 1 week ago
A vulnerability, which was classified as critical, has been found in Artekopia Netjuke up to 1.0 B6. Affected is the function eval. Performing manipulation of the argument section results in improper privilege management. This vulnerability is known as CVE-2002-2114. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2002-2115 | Hyper NIKKI System up to 0.8/2.10 cross site scripting (ID 10535 / XFDB-8204)

Vuldb Updates
2 months 1 week ago
A vulnerability, which was classified as problematic, was found in Hyper NIKKI System up to 0.8/2.10. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to basic cross site scripting. This vulnerability is handled as CVE-2002-2115. The attack can be executed remotely. There is not any exploit available. You should upgrade the affected component.
vuldb.com

CVE-2002-2121 | SurfControl Superscout Email Filter 3.5.1 SMTP Proxy HELO/RCPT TO memory corruption (ID 74097 / XFDB-8424)

Vuldb Updates
2 months 1 week ago
A vulnerability categorized as critical has been discovered in SurfControl Superscout Email Filter 3.5.1. The affected element is an unknown function of the component SMTP Proxy. Executing manipulation of the argument HELO/RCPT TO can lead to memory corruption. This vulnerability is tracked as CVE-2002-2121. The attack can be launched remotely. No exploit exists.
vuldb.com

Managed ad