Aggregator

阿富汗断网

Solidot
8 months 3 weeks ago
几周前，阿富汗切断了多省的光纤连接，本周一则发生了全国性断网。网络监测组织 Netblocks 报告阿富汗的网络连接率仅为正常水平的 14%。法新社报告在 6:15 pm (1315 GMT)与该新闻社位于喀布尔的分社失去联系。阿富汗此前表示它切断光纤接入是为了防止不良行为。

Akira ransomware: From SonicWall VPN login to encryption in under four hours

Help Net Security
8 months 3 weeks ago

Four hours or less: that’s how long it takes for Akira affiliates to break into organizations and deploy the ransomware on their systems, Arctic Wolf researchers have warned. Armed with SonicWall SSL VPN credentials stolen in earlier intrusions and apparently able to bypass multi-factor authentication (MFA), the attackers: Start to scan the network to discover network services and unsecured accounts Use Impacket to set up and interact with SMB sessions Use RDP for lateral movement … More →

The post Akira ransomware: From SonicWall VPN login to encryption in under four hours appeared first on Help Net Security.

Zeljka Zorz

CVE-2025-36351 | IBM License Metric Tool up to 9.2.40 REST API Interface access control (EUVD-2025-31574 / WID-SEC-2025-2149)

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability, which was classified as critical, has been found in IBM License Metric Tool up to 9.2.40. Impacted is an unknown function of the component REST API Interface. The manipulation leads to improper access controls. This vulnerability is listed as CVE-2025-36351. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.
vuldb.com

CVE-2025-57516 | PublicCMS 5.202506.a/5.202506.b backupDB.bat DATABASE/USERNAME/PASSWORD os command injection (Issue 97)

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability classified as critical has been found in PublicCMS 5.202506.a/5.202506.b. This vulnerability affects unknown code of the file backupDB.bat. Performing manipulation of the argument DATABASE/USERNAME/PASSWORD results in os command injection. This vulnerability is identified as CVE-2025-57516. The attack can only be performed from the local network. There is not any exploit available.
vuldb.com

CVE-2025-57428 | Each Italy Wireless Mini Router WIRELESS-N 300M 20190211 Telnet Service default credentials

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability marked as critical has been reported in Each Italy Wireless Mini Router WIRELESS-N 300M 20190211. Affected by this issue is some unknown functionality of the component Telnet Service. This manipulation causes use of default credentials. The identification of this vulnerability is CVE-2025-57428. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

CVE-2025-36352 | IBM License Metric Tool up to 9.2.40 cross site scripting (WID-SEC-2025-2149)

VulDB Recent Entries
8 months 3 weeks ago
A vulnerability labeled as problematic has been found in IBM License Metric Tool up to 9.2.40. Affected by this vulnerability is an unknown functionality. The manipulation results in cross site scripting. This vulnerability was named CVE-2025-36352. The attack may be performed from remote. There is no available exploit. The affected component should be upgraded.
vuldb.com

Managed ad