Security Affairs

JANUARY 20, 2025

Crooks used names typosquatting popular libraries, such as @async-mutex/mutex , dexscreener , solana-transaction-toolkit and solana-stable-web-huks. “It is important to verify a packages authenticity by examining its download counts, publisher history, and any associated GitHub repository links.

Libraries 237

Libraries Authentication IT Access 237

Security Affairs

MARCH 11, 2024

Researchers released technical specifics and a PoC exploit for a recently disclosed flaw in Progress Software OpenEdge Authentication Gateway and AdminServer. ” The vulnerability CVE-2024-1403 (CVSS score 10) is an authentication bypass issue that impacts OpenEdge versions 11.7.18 If a match occurs, authentication is granted.

Authentication 340

Authentication Passwords Libraries Access 340

Security Affairs

DECEMBER 28, 2023

Experts warn of an authentication bypass zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. Experts warn of a zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. ” reads the report published by SonicWall.

Authentication 347

Authentication Libraries Passwords Information Security 347

Security Affairs

OCTOBER 17, 2018

The Libssh library is affected by a severe flaw that could be exploited by attackers to completely bypass authentication and take over a vulnerable server. The flaw is an authentication-bypass vulnerability that was introduced in Libssh version 0.6 and above have an authentication bypass vulnerability in the server code. .

Libraries 279

Libraries Authentication Passwords Security 279

Security Affairs

MARCH 30, 2024

Red Hat warns of a backdoor in XZ Utils data compression tools and libraries in Fedora development and experimental versions. Red Hat urges users to immediately stop using systems running Fedora development and experimental versions because of a backdoor in the latest versions of the “xz” tools and libraries. rpm and xz-libs-5.6.0-2.fc40.x86_64.rpm

Libraries 348

Libraries Authentication Access Risk 348

Security Affairs

NOVEMBER 15, 2022

The issue can be exploited by triggering a recently disclosed VM sandbox escape vulnerability (CVE-2022-36067 aka Sandbreak) in the vm2 third-party library. The researchers explained that the template engine utilizes the vm2 library to prevent the execution of untrusted code. ” reads the advisory published by Oxeye.

Libraries 297

Libraries Authentication Paper Risk 297

Security Affairs

JULY 7, 2022

“Unlike other threats that hijack shared libraries by modifying the environment variable LD_PRELOAD, this malware uses 2 different ways to load the malicious library. “The shared object hooks functions from 3 libraries: libc, libcap and Pluggable Authentication Module (PAM). ” continues the experts.

Libraries 340

Libraries Cybersecurity Authentication Access 340

Security Affairs

DECEMBER 12, 2021

Immediately after the disclosure of the Log4Shell flaw in Log4j library threat actors started including the exploit code in Linux botnets. Researchers at NetLab 360 reported that their Anglerfish and Apacket honeypots were already hit by attacks attempting to trigger the Log4Shell flaw in the Log4j library.

Honeypots 363

Honeypots Libraries Passwords Authentication 363

Security Affairs

DECEMBER 4, 2020

Hundreds of millions of Android users are potentially exposed to the risk of hack due to the use of Android Play Core Library versions vulnerable to CVE-2020-8913. The CVE-2020-8913 flaw is a local, arbitrary code execution vulnerability that resides exists in the SplitCompat.install endpoint in Android’s Play Core Library.

Libraries 337

Libraries e-Delivery Risk Passwords 337

Security Affairs

MARCH 23, 2020

Microsoft warns of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. Microsoft warns of hackers exploiting two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 320

Libraries Risk Authentication Security 320

Security Affairs

MAY 2, 2024

Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.

Passwords 330

Passwords Authentication Access Phishing 330

Security Affairs

SEPTEMBER 6, 2023

The attackers forged authentication tokens to access user email using an acquired Microsoft account (MSA) consumer signing key.

Authentication 337

Authentication Libraries Access Government 337

Security Affairs

JANUARY 12, 2024

In December, experts warned of an authentication bypass zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. An attacker can trigger the vulnerability, tracked as CVE-2023-51467 , to bypass authentication to achieve a simple Server-Side Request Forgery (SSRF). in the Apache OfBiz.

Honeypots 359

Honeypots Authentication Libraries Passwords 359

Security Affairs

APRIL 30, 2020

EventBot is a mobile banking trojan and infostealer that abuses Android’s accessibility features to steal user data from financial applications, read user SMS messages, and steal SMS messages to allow the malware to bypass two-factor authentication.” ” reads the analysis published by Cybereason. ” concludes the report.

Financial Services 356

Financial Services Libraries Encryption Authentication 356

Security Affairs

SEPTEMBER 24, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon.

Authentication 348

Authentication Passwords Analytics Libraries 348

Security Affairs

NOVEMBER 2, 2022

The OpenSSL project fixed two high-severity flaws in its cryptography library that can trigger a DoS condition or achieve remote code execution. The OpenSSL project has issued security updates to address a couple of high-severity vulnerabilities, tracked as CVE-2022-3602 and CVE-2022-3786 , in its cryptography library. of the library.

Libraries 308

Libraries Encryption Authentication Communications 308

Security Affairs

DECEMBER 8, 2020

Security researchers at Digital Defense discovered three vulnerabilities in D-Link VPN routers, including command injection flaws, and an authenticated crontab injection flaw. The third flaw is an Authenticated Crontab Injection that could allow an authenticated user to inject arbitrary CRON entries that will then be executed as root.

Authentication 328

Authentication Access Libraries Security 328

Security Affairs

SEPTEMBER 14, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon. published a detailed analysis of the flaw.

Authentication 327

Authentication Passwords Libraries Paper 327

Security Affairs

APRIL 9, 2024

Most of the Internet-facing devices are in South Korea, Hong Kong, the U.S., Sweden, and Finland. running on LG43UM7000PLA webOS 5.5.0 – 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 442 (kisscurl-kinglake) – 03.36.50 running on OLED48C1PUB webOS 7.3.1-43 43 (mullet-mebin) – 03.33.85 running on OLED55CXPUA webOS 6.3.3-442

Authentication 349

Authentication Libraries Access Information Security 349

Security Affairs

SEPTEMBER 19, 2024

An attacker could chain the issue with the recently disclosed flaw CVE-2024-8190 to bypass admin authentication and execute arbitrary commands on the appliance. “Ivanti is disclosing a critical vulnerability in Ivanti CSA 4.6 is End-of-Life , and no longer receives updates for OS or third-party libraries. Patch 519). .

Cloud 307

Cloud Authentication Libraries Access 307

Security Affairs

SEPTEMBER 20, 2024

An attacker could chain the issue with the recently disclosed flaw CVE-2024-8190 to bypass admin authentication and execute arbitrary commands on the appliance. Patch 519). “If CVE-2024-8963 is used in conjunction with CVE-2024-8190 an attacker can bypass admin authentication and execute arbitrary commands on the appliance.”

Cloud 317

Cloud IT Authentication Cybersecurity 317

Security Affairs

JULY 24, 2023

The ssh-agent is a program that caches private keys for SSH public key authentication, reducing the need for regular passphrase input. The vulnerability can be exploited only if certain libraries are installed on systems running the vulnerable versions and the SSH authentication agent is forwarded to an attacker-controlled system.

Libraries 246

Libraries Authentication Encryption Security 246

Security Affairs

NOVEMBER 2, 2022

These legitimate-looking emails directed employees to visit a fake CircleCI login page, enter their GitHub username and password, and then use their hardware authentication key to pass a One Time Password (OTP) to the malicious site.” ” reads the advisory published by the company.

Access 335

Access Phishing Passwords Authentication 335

Security Affairs

APRIL 2, 2024

Researchers from the firmware security firm Binarly released a free online scanner to detect the CVE-2024-3094 Backdoor Last week, Microsoft engineer Andres Freund discovered a backdoor issue in the latest versions of the “xz” tools and libraries. The malicious build interferes with the authentication in sshd through systemd.

Authentication 333

Authentication Libraries Access Security 333

Security Affairs

AUGUST 12, 2024

. “Attackers use the classic DLL sideloading technique: when the desktop.exe file is launched, the malicious VERSION.dll library is loaded into the corresponding process” reads the report published by Kaspersky. “This library is a backdoor packed with the VMProtect tool.

Libraries 342

Libraries Encryption Cloud Archiving 342

Security Affairs

APRIL 6, 2020

In order to discover potential targets and locate the information it needs to authenticate against, the script passively collects data from /.ssh/config,bash_history, gopsutil – a process utility library, used for system and processes monitoring. gopsutil – a process utility library, used for system and processes monitoring.

Mining 323

Mining Libraries Cloud Communications 323

eSecurity Planet

JUNE 30, 2022

CISA noted that Basic authentication is simple and pretty convenient but unsecured by design. And it’s incompatible with multi-factor authentication (MFA) systems , so admins might be discouraged from enabling it. or Microsoft Active Directory Authentication Library uses tokens that expire quickly and cannot be reused elsewhere.

Authentication 113

Authentication Libraries Cloud Passwords 113

Security Affairs

DECEMBER 17, 2023

“Today we experienced an exploit on the Ledger Connect Kit, a Javascript library that implements a button allowing users to connect their Ledger device to third party DApps (wallet-connected Web sites). ” The initial observation suggests that the account probably did not have Multi-Factor Authentication (MFA) enabled.

Phishing 349

Phishing Libraries Authentication Access 349

Security Affairs

DECEMBER 31, 2021

Below is the list of flaws discovered by the researchers: CVE-2021-20173 : Post Authentication Command Injection via SOAP Interface. Researchers discovered multiple instances of known vulnerable jQuery libraries (such as jquery 1.4.2), for this reason, they are urging to update them to the latest available versions.

Communications 358

Communications Libraries Encryption Passwords 358

Security Affairs

SEPTEMBER 14, 2024

Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. is End-of-Life , and no longer receives updates for OS or third-party libraries. An attacker can trigger this high-severity vulnerability to achieve remote code execution under specific conditions. to address the vulnerability.

Cloud 310

Cloud Libraries Authentication Cybersecurity 310

Security Affairs

JANUARY 22, 2021

The experts discovered that Amazon did not verify the authenticity of the email sender, this means that attackers can spoof an email address that is present in the list of approved addresses. ” continues the post. “To test this, I used an email spoofing service to spoof an email message and send an e-book to my device.

Authentication 360

Authentication Libraries Phishing Security 360

Security Affairs

MARCH 8, 2024

resides in the SAML authentication process of Cisco Secure Client, an unauthenticated, remote attacker can exploit the flaw to conduct a carriage return line feed (CRLF) injection attack against a user. An authenticated, local attacker can exploit the flaw to elevate privileges on an affected device. ” reads the advisory.

Security 332

Security IT Authentication Libraries 332

Security Affairs

APRIL 14, 2020

The two RCE flaws in Windows, tracked as CVE-2020-1020 and CVE-2020-0938 , are related to the Adobe Type Manager Library. In March, Microsoft warned of hackers exploiting the two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 312

Libraries Authentication Security Risk 312

Security Affairs

SEPTEMBER 14, 2024

Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. is End-of-Life , and no longer receives updates for OS or third-party libraries. An attacker can trigger this high-severity vulnerability to achieve remote code execution under specific conditions. “An reads the advisory.

Cloud 330

Cloud IT Libraries Cybersecurity 330

Security Affairs

MARCH 15, 2019

The initial vulnerability that we discovered in October 2012 was related to the “Internet Key Exchange and Authenticated Internet Protocol Keying Modules”. Those modules are used for authentication and key exchange in Internet Protocol security. Tracking high-privileges libraries calls with DLL-based loggers.

Libraries 272

Libraries Authentication Access IT 272

Security Affairs

AUGUST 26, 2021

that allows remote authenticated attackers to execute arbitrary code as the root user via maliciously crafted meeting room. Another sample documented by the experts allows attackers to parse incoming web request data, while another file could be used to intercept certificate-based multi-factor authentication. ” reads the MAR.

Security 346

Security Authentication Libraries Passwords 346

Security Affairs

JANUARY 19, 2022

The vulnerability, tracked as CVE-2021-35247 , was discovered by Microsoft security researcher Jonathan Bar Or while monitoring attacks exploiting the vulnerabilities in the Log4j library. SolarWinds released Serv-U 15.3 that addresses the vulnerability by performing additional validation and sanitization.

Authentication 350

Authentication Ransomware Libraries Security 350