Severity High Analysis Summary The vulnerability is due to incomplete validation and error checking for the file path when specific software is uploaded. An attacker could […]
Severity High Analysis Summary Attackers have compromised a website collecting donations for the victims of the Australia bushfires and injected a malicious script that steals the payment […]
Severity High Analysis Summary Two WordPress plugins, InfiniteWP Client and WP Time Capsule, suffer from the same critical authorization bypass bug that allows adversaries to access […]
Severity High Analysis Summary Description: Improper access control in driver for Intel(R) VTune(TM) Amplifier for Windows* before update 8 may allow an authenticated user to potentially […]
Severity High Analysis summary A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability […]
Severity High Analysis Summary This vulnerability could be exploited by an attacker with network access to the affected systems. An attacker could obtain sensitive information or […]
Severity High Analysis Summary Incorrect session validation could allow an attacker with a valid session, with low privileges, to perform firmware updates and other administrative operations […]
Severity High Analysis Summary RootKit module of ZxShell RAT used by Emissary Panda (APT27), of which there is a relatively recent sample. This rootkit is a […]
Severity High Analysis Summary A LNK file that targets the Maldives ministry of foreign affairs. The LNK is set to download and execute an HTA file. […]