Severity Medium Analysis Summary A new Agent Tesla campaign is seen targeting victims with malspam. AgentTesla is known for stealing data from different applications on victim […]

Severity Medium Analysis Summary AZORult is a payment card and credential information stealer. It was sold on Russian underground forums as a means to collect sensitive […]

Severity High Analysis Summary CVE-2021-21389 A privilege escalation vulnerability exists in WordPress BuddyPress Plugin. Successful exploitation of this vulnerability would allow a remote attacker to gain […]

Severity Medium Analysis Summary Remcos Remote Control and Surveillance, marketed as a legitimate software by a Germany-based firm Breaking Security for remotely managing Windows systems is […]

Severity High Analysis Summary CVE-2020-29011 Instances of SQL Injection vulnerabilities in FortiSandbox’s checksum search and MTA-quarantine modules may allow an authenticated attacker to execute unauthorized code […]

Severity High Analysis Summary CVE-2021-33195 IBM App Connect Enterprise Certified Container could allow a remote attacker to execute arbitrary code. Impact Code Execution Unauthorized Access Affected […]

Severity High Analysis Summary CVE-2021-32804 Node.js tar module could allow a local attacker to traverse directories on the system, caused by insufficient absolute path sanitization. An […]

Severity High Analysis Summary CVE-2019-17006 In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length checks. In cases where the application calling the […]

Severity Medium Analysis Summary Also known as “Racealer,” Racoon is used to steal sensitive and confidential information including login credentials, credit card information, cryptocurrency wallets and […]