Security Affairs

DECEMBER 28, 2023

Experts warn of an authentication bypass zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. Experts warn of a zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. ” reads the report published by SonicWall.

Authentication 350

Authentication Libraries Passwords Information Security 350

Security Affairs

OCTOBER 17, 2018

The Libssh library is affected by a severe flaw that could be exploited by attackers to completely bypass authentication and take over a vulnerable server. The flaw is an authentication-bypass vulnerability that was introduced in Libssh version 0.6 and above have an authentication bypass vulnerability in the server code. .

Libraries 279

Libraries Authentication Passwords Security 279

Security Affairs

NOVEMBER 15, 2022

The issue can be exploited by triggering a recently disclosed VM sandbox escape vulnerability (CVE-2022-36067 aka Sandbreak) in the vm2 third-party library. The researchers explained that the template engine utilizes the vm2 library to prevent the execution of untrusted code. ” reads the advisory published by Oxeye.

Libraries 300

Libraries Authentication Paper Risk 300

Security Affairs

JULY 7, 2022

“Unlike other threats that hijack shared libraries by modifying the environment variable LD_PRELOAD, this malware uses 2 different ways to load the malicious library. “The shared object hooks functions from 3 libraries: libc, libcap and Pluggable Authentication Module (PAM). ” continues the experts.

Libraries 343

Libraries Cybersecurity Authentication Access 343

Security Affairs

MARCH 23, 2020

Microsoft warns of hackers actively exploiting two zero-day remote code execution vulnerabilities in Windows Adobe Type Manager Library. Microsoft warns of hackers exploiting two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 336

Libraries Risk Authentication Security 336

Security Affairs

DECEMBER 12, 2021

Immediately after the disclosure of the Log4Shell flaw in Log4j library threat actors started including the exploit code in Linux botnets. Researchers at NetLab 360 reported that their Anglerfish and Apacket honeypots were already hit by attacks attempting to trigger the Log4Shell flaw in the Log4j library.

Honeypots 363

Honeypots Libraries Passwords Authentication 363

Security Affairs

DECEMBER 4, 2020

Hundreds of millions of Android users are potentially exposed to the risk of hack due to the use of Android Play Core Library versions vulnerable to CVE-2020-8913. The CVE-2020-8913 flaw is a local, arbitrary code execution vulnerability that resides exists in the SplitCompat.install endpoint in Android’s Play Core Library.

Libraries 340

Libraries e-Delivery Risk Passwords 340

Security Affairs

APRIL 9, 2024

Most of the Internet-facing devices are in South Korea, Hong Kong, the U.S., Sweden, and Finland. running on LG43UM7000PLA webOS 5.5.0 – 04.50.51 running on OLED55CXPUA webOS 6.3.3-442 442 (kisscurl-kinglake) – 03.36.50 running on OLED48C1PUB webOS 7.3.1-43 43 (mullet-mebin) – 03.33.85 running on OLED55CXPUA webOS 6.3.3-442

Authentication 352

Authentication Libraries Access Information Security 352

Security Affairs

SEPTEMBER 6, 2023

The attackers forged authentication tokens to access user email using an acquired Microsoft account (MSA) consumer signing key.

Authentication 340

Authentication Libraries Access Government 340

Security Affairs

MAY 2, 2024

Threat actors breached the Dropbox Sign production environment and accessed customer email addresses and hashed passwords Cloud storage provider DropBox revealed that threat actors have breached the production infrastructure of the DropBox Sign eSignature service and gained access to customer information and authentication data.

Passwords 334

Passwords Authentication Access Phishing 334

Security Affairs

APRIL 30, 2020

EventBot is a mobile banking trojan and infostealer that abuses Android’s accessibility features to steal user data from financial applications, read user SMS messages, and steal SMS messages to allow the malware to bypass two-factor authentication.” ” reads the analysis published by Cybereason. ” concludes the report.

Financial Services 358

Financial Services Libraries Encryption Authentication 358

Security Affairs

SEPTEMBER 24, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon.

Authentication 351

Authentication Passwords Analytics Libraries 351

Security Affairs

JANUARY 12, 2024

In December, experts warned of an authentication bypass zero-day flaw that affects Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system. An attacker can trigger the vulnerability, tracked as CVE-2023-51467 , to bypass authentication to achieve a simple Server-Side Request Forgery (SSRF). in the Apache OfBiz.

Honeypots 360

Honeypots Authentication Libraries Passwords 360

Security Affairs

APRIL 2, 2024

Researchers from the firmware security firm Binarly released a free online scanner to detect the CVE-2024-3094 Backdoor Last week, Microsoft engineer Andres Freund discovered a backdoor issue in the latest versions of the “xz” tools and libraries. The malicious build interferes with the authentication in sshd through systemd.

Authentication 336

Authentication Libraries Access Security 336

Security Affairs

DECEMBER 8, 2020

Security researchers at Digital Defense discovered three vulnerabilities in D-Link VPN routers, including command injection flaws, and an authenticated crontab injection flaw. The third flaw is an Authenticated Crontab Injection that could allow an authenticated user to inject arbitrary CRON entries that will then be executed as root.

Authentication 332

Authentication Access Libraries Security 332

Security Affairs

SEPTEMBER 14, 2020

The Netlogon service is an Authentication Mechanism used in the Windows Client Authentication Architecture which verifies logon requests, and it registers, authenticates, and locates Domain Controllers. The CVE-2020-1472 flaw is an elevation of privilege that resides in the Netlogon. published a detailed analysis of the flaw.

Authentication 332

Authentication Passwords Libraries Paper 332

Security Affairs

APRIL 6, 2020

In order to discover potential targets and locate the information it needs to authenticate against, the script passively collects data from /.ssh/config,bash_history, gopsutil – a process utility library, used for system and processes monitoring. gopsutil – a process utility library, used for system and processes monitoring.

Mining 340

Mining Libraries Cloud Communications 340

Security Affairs

APRIL 14, 2020

The two RCE flaws in Windows, tracked as CVE-2020-1020 and CVE-2020-0938 , are related to the Adobe Type Manager Library. In March, Microsoft warned of hackers exploiting the two zero-day remote code execution (RCE) vulnerabilities in the Windows Adobe Type Manager Library, both issues impact all supported versions of Windows.

Libraries 333

Libraries Authentication Security Risk 333

Security Affairs

SEPTEMBER 19, 2024

An attacker could chain the issue with the recently disclosed flaw CVE-2024-8190 to bypass admin authentication and execute arbitrary commands on the appliance. “Ivanti is disclosing a critical vulnerability in Ivanti CSA 4.6 is End-of-Life , and no longer receives updates for OS or third-party libraries. Patch 519). .

Cloud 311

Cloud Authentication Libraries Access 311

Security Affairs

SEPTEMBER 20, 2024

An attacker could chain the issue with the recently disclosed flaw CVE-2024-8190 to bypass admin authentication and execute arbitrary commands on the appliance. Patch 519). “If CVE-2024-8963 is used in conjunction with CVE-2024-8190 an attacker can bypass admin authentication and execute arbitrary commands on the appliance.”

Cloud 321

Cloud IT Authentication Cybersecurity 321

Security Affairs

NOVEMBER 2, 2022

These legitimate-looking emails directed employees to visit a fake CircleCI login page, enter their GitHub username and password, and then use their hardware authentication key to pass a One Time Password (OTP) to the malicious site.” ” reads the advisory published by the company.

Access 338

Access Phishing Passwords Authentication 338

Security Affairs

JULY 24, 2023

The ssh-agent is a program that caches private keys for SSH public key authentication, reducing the need for regular passphrase input. The vulnerability can be exploited only if certain libraries are installed on systems running the vulnerable versions and the SSH authentication agent is forwarded to an attacker-controlled system.

Libraries 246

Libraries Authentication Encryption Security 246

Security Affairs

AUGUST 12, 2024

. “Attackers use the classic DLL sideloading technique: when the desktop.exe file is launched, the malicious VERSION.dll library is loaded into the corresponding process” reads the report published by Kaspersky. “This library is a backdoor packed with the VMProtect tool.

Libraries 345

Libraries Encryption Cloud Archiving 345

Security Affairs

DECEMBER 17, 2023

“Today we experienced an exploit on the Ledger Connect Kit, a Javascript library that implements a button allowing users to connect their Ledger device to third party DApps (wallet-connected Web sites). ” The initial observation suggests that the account probably did not have Multi-Factor Authentication (MFA) enabled.

Phishing 352

Phishing Libraries Authentication Access 352

Security Affairs

SEPTEMBER 14, 2024

Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. is End-of-Life , and no longer receives updates for OS or third-party libraries. An attacker can trigger this high-severity vulnerability to achieve remote code execution under specific conditions. to address the vulnerability.

Cloud 314

Cloud Libraries Authentication Cybersecurity 314

eSecurity Planet

JUNE 30, 2022

CISA noted that Basic authentication is simple and pretty convenient but unsecured by design. And it’s incompatible with multi-factor authentication (MFA) systems , so admins might be discouraged from enabling it. or Microsoft Active Directory Authentication Library uses tokens that expire quickly and cannot be reused elsewhere.

Authentication 115

Authentication Libraries Cloud Passwords 115

Security Affairs

DECEMBER 31, 2021

Below is the list of flaws discovered by the researchers: CVE-2021-20173 : Post Authentication Command Injection via SOAP Interface. Researchers discovered multiple instances of known vulnerable jQuery libraries (such as jquery 1.4.2), for this reason, they are urging to update them to the latest available versions.

Communications 359

Communications Libraries Encryption Passwords 359

Security Affairs

JANUARY 22, 2021

The experts discovered that Amazon did not verify the authenticity of the email sender, this means that attackers can spoof an email address that is present in the list of approved addresses. ” continues the post. “To test this, I used an email spoofing service to spoof an email message and send an e-book to my device.

Authentication 361

Authentication Libraries Phishing Security 361

Security Affairs

MARCH 8, 2024

resides in the SAML authentication process of Cisco Secure Client, an unauthenticated, remote attacker can exploit the flaw to conduct a carriage return line feed (CRLF) injection attack against a user. An authenticated, local attacker can exploit the flaw to elevate privileges on an affected device. ” reads the advisory.

Security 336

Security IT Authentication Libraries 336

Security Affairs

JANUARY 14, 2021

out of 10, could be exploited by a remote authenticated attacker to change the password for any account user on affected systems. “A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system.”

Passwords 309

Passwords Authentication Analytics Libraries 309

Security Affairs

SEPTEMBER 14, 2024

Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. is End-of-Life , and no longer receives updates for OS or third-party libraries. An attacker can trigger this high-severity vulnerability to achieve remote code execution under specific conditions. “An reads the advisory.

Cloud 334

Cloud IT Libraries Cybersecurity 334

Security Affairs

MARCH 15, 2019

The initial vulnerability that we discovered in October 2012 was related to the “Internet Key Exchange and Authenticated Internet Protocol Keying Modules”. Those modules are used for authentication and key exchange in Internet Protocol security. Tracking high-privileges libraries calls with DLL-based loggers.

Libraries 275

Libraries Authentication Access IT 275

Security Affairs

AUGUST 26, 2021

that allows remote authenticated attackers to execute arbitrary code as the root user via maliciously crafted meeting room. Another sample documented by the experts allows attackers to parse incoming web request data, while another file could be used to intercept certificate-based multi-factor authentication. ” reads the MAR.

Security 349

Security Authentication Libraries Passwords 349

Security Affairs

JANUARY 19, 2022

The vulnerability, tracked as CVE-2021-35247 , was discovered by Microsoft security researcher Jonathan Bar Or while monitoring attacks exploiting the vulnerabilities in the Log4j library. SolarWinds released Serv-U 15.3 that addresses the vulnerability by performing additional validation and sanitization.

Authentication 354

Authentication Ransomware Libraries Security 354

Security Affairs

OCTOBER 11, 2024

” The Internet Archive is an American nonprofit digital library website that provides free access to collections of digitized materials including websites, software applications, music, audiovisual, and print materials. Hunt also verified the authenticity of the information included in the stolen archive.

Archiving 304

Archiving Data breaches Passwords File names 304

Security Affairs

SEPTEMBER 1, 2022

This finding suggests a potential supply chain vulnerability, these AWS access tokens are often exposed through shared library, third-party SDK, or other shared components used by the development teams. “The credentials could expose private authentication data and keys belonging to every banking and financial app using the SDK.

Cloud 251

Cloud Authentication B2B Libraries 251

Security Affairs

JUNE 10, 2020

“VMware Horizon Client for Windows contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. VMware also addressed a high-severity privilege escalation vulnerability, tracked as CVE-2020-3961, that affects Horizon Client for Windows.

Cloud 345

Cloud Libraries Access Authentication 345