Aggregator

Hackers Exploit Legitimate Inno Setup Installer to Use as a Malware Delivery Vehicle

Cyber Security News
11 hours ago

Cybercriminals have increasingly turned to legitimate software installation frameworks as vehicles for malware distribution, with Inno Setup emerging as a preferred tool for threat actors seeking to bypass security measures. This legitimate Windows installer framework, originally designed to simplify software deployment, has become a sophisticated delivery mechanism for information-stealing malware campaigns that target browser credentials […]

The post Hackers Exploit Legitimate Inno Setup Installer to Use as a Malware Delivery Vehicle appeared first on Cyber Security News.

Tushar Subhra Dutta

Akira

Dark Feed IO
11 hours 5 minutes ago

You must login to view this content

cohenido

Akira

Dark Feed IO
11 hours 5 minutes ago

You must login to view this content

cohenido

FakeArray 的新构造 + 劫持 Wasm LazyCompile 实现通用控制流劫持

先知技术社区
11 hours 10 minutes ago
本文主要探讨已经能够通过漏洞实现addrOf()、fakeObject()这样的原语后，如何最终实现程序流完整控制的通用手法。从提出新型Fakearray构造方式以绕过JSArray.elements结构校验，又介绍了WASM函数完整调用流程以及LazyCompile,从而提出一种基于覆盖Instance对象的jump_start_table的控制程序流方法

Ejpt exam vouchar Info

不安全
11 hours 12 minutes ago
r/netsecstudents是一个Reddit社区，旨在帮助网络安全部门的学生分享资源、提问和互相学习。用户询问如何获取埃及的考试折扣券。

CVE-2025-7076 | BlackVue Dashcam 590X up to 20250624 Configuration /upload.cgi access control

VulDB Recent Entries
11 hours 19 minutes ago
A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been rated as critical. Affected by this issue is some unknown functionality of the file /upload.cgi of the component Configuration Handler. The manipulation leads to improper access controls. This vulnerability is handled as CVE-2025-7076. The attack needs to be initiated within the local network. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

CVE-2025-7075 | BlackVue Dashcam 590X up to 20250624 HTTP Endpoint /upload.cgi unrestricted upload

VulDB Recent Entries
11 hours 19 minutes ago
A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. This vulnerability is known as CVE-2025-7075. The attack needs to be done within the local network. Furthermore, there is an exploit available. It is recommended to apply restrictive firewalling. The vendor was contacted early about this disclosure but did not respond in any way.
vuldb.com

Managed ad