Aggregator

Lazarus Group has been observed impersonating Capital One staff to lure developers into downloading malware on open source repositories

Learn why distributed cloud computing is essential to meet user demand for highly customized, secure services.

截至当前已有177家受害者

A vulnerability, which was classified as problematic, was found in OpenText eDirectory 9.2.5.0000. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2021-38131. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as critical, has been found in OpenText eDirectory 9.2.3.0000/9.2.4.0000. Affected by this issue is some unknown functionality. The manipulation leads to weak password requirements. This vulnerability is handled as CVE-2021-38133. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic was found in OpenText Identity Manager AzureAD Driver. Affected by this vulnerability is an unknown functionality. The manipulation leads to sensitive information in log files. This vulnerability is known as CVE-2021-22518. Attacking locally is a requirement. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as problematic has been found in OpenText eDirectory 9.2.4.0000. Affected is an unknown function. The manipulation leads to sensitive information in log files. This vulnerability is traded as CVE-2021-22533. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenText eDirectory 9.2.3.0000/9.2.4.0000. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to server-side request forgery. The identification of this vulnerability is CVE-2021-38132. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenText eDirectory 9.2.3.0000. It has been declared as critical. This vulnerability affects unknown code of the component NLDAP. The manipulation leads to allocation of resources. This vulnerability was named CVE-2021-22532. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenText eDirectory 9.2.3.0000. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2021-22503. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in OpenText Identity Manager REST Driver and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to sensitive information in log files. This vulnerability is handled as CVE-2022-26322. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

Web Security / Content ManagementWordPress.org has announced a new account security measure that w

Internet-exposed Selenium Grid instances are being targeted by bad actors for illicit cryptocurrency mining and proxyjacking campaigns. "Selenium Grid is a server that facilitates running test cases in parallel across different browsers and versions," Cado Security researchers Tara Gould and Nate Bill said in an analysis published today. "However, Selenium Grid's default configuration lacks

Обсерватория Веры Рубин начинает работу над подробной картой южного неба.

Cody Thomas developed Apfell, an open-source macOS post-exploitation framework, in 2018 and evolved into Mythic, a cross-platform framework that addresses the limitations of existing tools.  Mythic provides a unified interface for managing agents written in various languages for different platforms, which allows for flexibility and customization, enabling the creation of agents with specific functionalities.  Currently, […]

The post New Loki Backdoor Attacking macOS Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.