Aggregator
CVE-2016-4978 | Apache ActiveMQ Artemis up to 1.3.x Broker/REST GetObject deserialization (RHSA-2017:1834 / Nessus ID 102139)
CVE-2017-12174 | Artemis/HornetQ up to 2.3.x UDP Discovery Multicast Message resource consumption (RHSA-2018:0270 / Nessus ID 106651)
CVE-2020-10727 | Apache ActiveMQ Artemis up to 2.12.0 Management API artemis-users.properties insufficiently protected credentials (Bug 1827200)
CVE-2020-13932 | Apache ActiveMQ Artemis up to 2.13.0 MQTT client-id/topic name cross site scripting
CVE-2021-26117 | Apache ActiveMQ/ActiveMQ Artemis LDAP Login improper authentication
CVE-2021-26118 | Apache ActiveMQ Artemis 2.15.0 OpenWire Protocol access control
CVE-2021-26117 | Oracle FLEXCUBE Private Banking 12.0.0/12.1.0 Apache ActiveMQ improper authentication
CVE-2022-23913 | Apache ActiveMQ Artemis up to 2.19.0 resource consumption (Nessus ID 235116)
CVE-2022-35278 | Apache ActiveMQ Artemis up to 2.23.x Address/Queue cross site scripting
CVE-2021-4040 | Red Hat AMQ Broker Messages resource consumption
CVE-2021-26117 | Oracle Enterprise Data Quality 12.2.1.4.0 General improper authentication
Один запрос, захват аккаунта и доступ к личным перепискам. Критическая дыра в phpBB поставила под удар миллионы форумов
Hackers Use Microsoft Graph Reconnaissance to Target Payroll and HR Employees
Hackers are using Microsoft’s own cloud tools to quietly hunt down payroll and HR staff inside corporate networks, then reroute employee salaries to accounts they control. Security teams are racing to respond as the campaign continues to spread across industries and borders. The attack method is deceptively clean. Instead of planting malware or exploiting software […]
The post Hackers Use Microsoft Graph Reconnaissance to Target Payroll and HR Employees appeared first on Cyber Security News.
【生物战】美国国家情报总监加巴德披露美国纳税人资助的全球生物实验室计划的证据
数百万学生就读学校位于有毒污染场地 5 公里内
New attack turned Microsoft 365 Copilot into 1-click data theft tool
The Gentleman
You must login to view this content
The Gentleman
You must login to view this content
China-Nexus Hackers Use Backdoored PAM Modules for Credential Theft and Authentication Bypass
A sophisticated China-linked threat actor known as Velvet Ant has been running a long-term cyber intrusion inside a major organization’s internal network, going undetected for nearly a decade. The campaign, now called Operation Highland, revealed a level of patience and technical depth rarely seen in publicly documented intrusions. What made this attack particularly alarming was […]
The post China-Nexus Hackers Use Backdoored PAM Modules for Credential Theft and Authentication Bypass appeared first on Cyber Security News.