Security Affairs

JANUARY 13, 2025

Stealthy credit card skimmer targets WordPress e-commerce sites, injecting malicious JavaScript into CMS database tables to evade detection. Sucuri researchers warn of a stealthy credit card skimmer campaign targeting WordPress e-commerce sites by injecting malicious JavaScript into CMS database tables.

CMS 163

CMS Encryption IT Information Security 163

Security Affairs

SEPTEMBER 17, 2020

Drupal maintainers addressed several information disclosure and cross-site scripting (XSS) flaws in the popular content management system (CMS). Drupal maintainers addressed several information disclosure and cross-site scripting (XSS) vulnerabilities in the popular content management system (CMS).

CMS 360

CMS Metadata Access Security 360

Security Affairs

FEBRUARY 22, 2024

Joomla maintainers have addressed multiple vulnerabilities in the popular content management system (CMS) that can lead to execute arbitrary code. The impact of these flaws can be widespread because roughly 2% of all websites use Joomla, millions of websites worldwide use this CMS. The maintainers of the Joomla!

CMS 340

CMS Access Cybersecurity Risk 340

Security Affairs

OCTOBER 26, 2020

Security experts from Imperva have spotted a new sophisticated botnet, tracked as KashmirBlack is believed to have already infected hundreds of thousands of websites by exploiting vulnerabilities in their content management system (CMS) platforms.

CMS 314

CMS Mining Communications Security 314

Security Affairs

DECEMBER 16, 2020

mxtool -r -f toolsmulti-cms-search.xml 1>nul 2>nul. mxtool -r -f toolsmulti-cms-search.xml 1>nul 2>nul. The post HPE discloses critical zero-day in Systems Insight Manager appeared first on Security Affairs. HPE did not reveal if it is aware of attacks in the wild exploiting the zero-day vulnerability.

CMS 354

CMS Security IT Access 354

Security Affairs

APRIL 5, 2024

In this case, the command is sed, which adds a backdoor to the (automatically generated) CMS controller.” generated/code/Magento/Cms/Controller/Index/Index/Interceptor.php The described process allows attackers to establish persistent remote code execution via POST commands. ” reads the analysis published by Sansec.

CMS 337

CMS Security IT Information Security 337

Security Affairs

JANUARY 22, 2021

and 7 of the popular CMS. “The Drupal project uses the pear Archive_Tar library, which has released a security update that impacts Drupal.” “The Drupal project uses the pear Archive_Tar library, which has released a security update that impacts Drupal.” ” reads the advisory. . bz2, or.tlz files.

Libraries 314

Libraries CMS Security IT 314

Security Affairs

JULY 23, 2024

Threat actors abused swap files in compromised Magento websites to hide credit card skimmer and harvest payment information. Security researchers from Sucuri observed threat actors using swap files in compromised Magento websites to conceal a persistent software skimmer and harvest payment information.

Cleanup 333

Cleanup CMS File names Analytics 333

Security Affairs

OCTOBER 3, 2024

The typical attack strategy is to steal your secret crypt key from app/etc/env.php and use that to modify your CMS blocks via the Magento API. Bad actors use it to read any of your files, such as passwords and other secrets. Then, attackers inject malicious Javascript to steal your customer’s data.”

CMS 340

CMS Passwords Cybersecurity IT 340

Security Affairs

DECEMBER 14, 2022

. “Although this malware is still a work in progress, the fact that it has a fully functional WordPress brute forcer combined with its anti-bot evasion techniques makes it a threat to watch for—especially with the immense popularity of the WordPress CMS, which powers millions of websites globally.” ” concludes the report.

CMS 355

CMS Encryption Risk Passwords 355

Security Affairs

JULY 19, 2020

Their attempt to patch the vulnerability was a fail even after removing their CMS and adding a maintenance index we were still able to get access. ” According to the hackers, the ESA experts have yet to fix the problem, they only removed the installation of the CMS. ” the hackers told me. ” the hackers said.

CMS 285

CMS Military Access Government 285

Security Affairs

NOVEMBER 19, 2020

In May they addressed XSS and open redirect flaws, while in June they released security updates to address multiple security vulnerabilities, including a “critical” flaw tracked as CVE-2020-13664 that could be exploited by an attacker to execute arbitrary PHP code. Pierluigi Paganini. SecurityAffairs – hacking, Drupal).

CMS 308

CMS Libraries Security Information Security 308

Security Affairs

JUNE 17, 2022

This allowed the attacker to intercept user credentials and session cookies from administrative access to the websites’ content management system (CMS).” ” states the report.”Volexity

CMS 361

CMS IT Authentication Access 361

Security Affairs

MAY 13, 2024

Unlike other disinformation campaigns, GhostWriter doesn’t spread through social networks, instead, threat actors behind this campaign abused compromised content management systems (CMS) of news websites or spoofed email accounts to disseminate fake news.

CMS 353

CMS Military Archiving Security 353

Security Affairs

JANUARY 23, 2022

CVE Number CVE Title Required Action Due Date CVE-2021-32648 October CMS Improper Authentication 2/1/2022 CVE-2021-21315 System Information Library for node.js CVE Number CVE Title Required Action Due Date CVE-2021-32648 October CMS Improper Authentication 2/1/2022 CVE-2021-21315 System Information Library for node.js

CMS 289

CMS IT Authentication Libraries 289

Security Affairs

AUGUST 30, 2022

The experts studied the evolution of CMS plugins in the production web servers dating back to 2012, to do this they developed an automated framework named YODA to detect malicious plugins. The number of malicious plugins on WordPress websites has increased over the years, and malicious activity reached a peak in March 2020.

CMS 361

CMS Paper Security Information Security 361

Security Affairs

JANUARY 25, 2022

The store is running the Magento CMS, threat actors used to compromise them by exploiting vulnerabilities in vulnerable versions of the CMS itself or one of its plugins. Researchers noticed the Segway store was contacting a known skimmer domain (booctstrap[.]com)

CMS 246

CMS IT Security Data breaches 246

Security Affairs

JUNE 18, 2020

SecurityAffairs – hacking, CMS). The post Drupal addresses critical code execution vulnerability appeared first on Security Affairs. . ~ Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->. Copyright (C) 2014 Media.net Advertising FZ-LLC All Rights Reserved -->. Pierluigi Paganini.

CMS 307

CMS Security Access IT 307

Security Affairs

AUGUST 27, 2024

The WPML Multilingual CMS Plugin for WordPress is installed on over 1 million sites. A critical flaw in the WPML WordPress plugin, which is installed on 1 million websites, could allow potential compromise of affected sites.

CMS 311

CMS Authentication Security IT 311

Security Affairs

MARCH 28, 2022

The content of the malicious websites – clones of the official stores – are based on a static Content Management System (CMS) and a PHP API that communicates with a MySQL cluster in the background. Some artifacts related to the static CMS can be found on a GitHub repository from criminals.

CMS 246

CMS Communications Information Security Passwords 246

Security Affairs

JUNE 30, 2024

Infosys McCamish Systems data breach impacted over 6 million people A cyberattack shut down the University Hospital Centre Zagreb in Croatia US announces a $10M reward for Russia’s GRU hacker behind attacks on Ukraine New P2Pinfect version delivers miners and ransomware on Redis servers New MOVEit Transfer critical bug is actively exploited New (..)

Security 317

Security CMS Ransomware Data breaches 317

Security Affairs

SEPTEMBER 14, 2020

Sansec researchers speculate that tens of thousands of customers of the online stores had their personal and financial information stolen over the weekend. ’ z3r0day declared that he was selling only 10 copies of its exploit.

CMS 340

CMS Cybersecurity Security IT 340

Security Affairs

MAY 28, 2024

“Here’s a simple guide to protect your online store: Keep your software patched : Regularly update your CMS, plugins, themes, and any third-party components to patch vulnerabilities. . “In essence, ecommerce sites are prime targets for hackers due to the valuable data they handle.” ” concludes the report.

CMS 340

CMS Passwords IT Security 340

Security Affairs

DECEMBER 1, 2021

“Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS #7, or PKCS #12 are likely to be impacted. ” reads the security advisory published by Mozilla. The flaw was addressed with the release of NSS 3.73.0. Ormandy recommends vendors of products using the NSS to update their library.

Libraries 348

Libraries Security CMS Communications 348

Security Affairs

JANUARY 16, 2020

WP Time Capsule and InfiniteWP WordPress plugins are affected by security flaws that could be exploited to take over websites running the popular CMS. Experts at security firm WebArx have ethically disclosed vulnerabilities in WP Time Capsule and InfiniteWP plugins, both were patched earlier this month by the developer Revmakx.

CMS 242

CMS Passwords Authentication Security 242

Security Affairs

MARCH 25, 2020

The experts from Malwarebytes speculate that the website was hacked because it was running an outdated version of Magento e-commerce CMS. .” Tupperware addressed the issue, now the payment form is currently loading from the legitimate domain cybersource.com. ” concludes Malwarebytes.

CMS 358

CMS Manufacturing Access IT 358

Security Affairs

JANUARY 15, 2024

Doctor Web has discovered a malicious Linux program that hacks websites based on a WordPress CMS. The malicious code was first discovered in December 2022 by AV firm Doctor Web. It exploits 30 vulnerabilities in a number of plugins and themes for this platform. reads the report published by Dr Web.

CMS 353

CMS IT Information Security Security 353

Security Affairs

JANUARY 22, 2023

OpenText Extended ECM is an enterprise CMS platform that manages the information lifecycle by integrating with leading enterprise applications, such as SAP, Microsoft 365, Salesforce and SAP SuccessFactors.

ECM 246

ECM CMS Authentication Cybersecurity 246

Security Affairs

AUGUST 14, 2023

Experts warn of ongoing attacks, dubbed Xurum, targeting e-commerce websites using Adobe’s Magento 2 CMS. Akamai researchers warn of ongoing attacks, dubbed Xurum, targeting e-commerce websites running the Magento 2 CMS.

CMS 246

CMS IT Security Information Security 246

Security Affairs

AUGUST 3, 2020

Unlike other disinformation campaigns, GhostWriter doesn’t spread through social networks, instead, threat actors behind this campaign abused compromised content management systems (CMS) of news websites or spoofed email accounts to disseminate fake news.

Military 347

Military CMS Security Government 347

Security Affairs

JUNE 22, 2022

The researchers explained that they have generally seen less skimming attacks during the past several months, perhaps because they were more focused on the Magento CMS. Malwarebytes researchers observed the use of 3 different themes by the threat actor to hide their skimmer, named after JavaScript libraries: hal-data[.]org/gre/code.js

Cleanup 323

Cleanup CMS Libraries Phishing 323

Security Affairs

MARCH 26, 2020

In November 2017, researchers from Sucuri firm discovered a new strain of this malware that injected malicious code in the legitimate files of the two the default themes “twentyfifteen” and “twentysixteen”included in the WordPress CMS in 2015 and 2016.

CMS 356

CMS IT Security Information Security 356

Security Affairs

FEBRUARY 23, 2025

CISA adds Craft CMS and Palo Alto Networks PAN-OS flaws to its Known Exploited Vulnerabilities catalog Atlassian fixed critical flaws in Confluence and Crowd Salt Typhoon used custom malware JumbledPath to spy U.S. Lazarus APT stole $1.5B

Security 163

Security CMS Phishing Encryption 163

Security Affairs

OCTOBER 12, 2023

“Doctor Web has discovered a malicious Linux program that hacks websites based on a WordPress CMS. The malicious code was first discovered in December 2022 by AV firm Doctor Web. It exploits 30 vulnerabilities in a number of plugins and themes for this platform. ” reads the report published by Dr Web.

CMS 348

CMS Security IT Information Security 348

Security Affairs

APRIL 17, 2023

Legion exploits web servers running Content Management Systems (CMS), PHP, or PHP-based frameworks such as Laravel. “From these targeted servers, the tool uses a number of RegEx patterns to extract credentials for various web services. The experts believe that the tool is widely distributed and is likely paid malware.

CMS 246

CMS Education Cloud Phishing 246

Security Affairs

OCTOBER 16, 2020

Other flaws fixed by Adobe include a stored cross-site scripting (XSS) issue (CVE-2020-24408), a user session invalidation bug (CVE-2020-24401), and a security vulnerability that allows Magento CMS pages to be modified without permission (CVE-2020-24404).

CMS 276

CMS Access Security Information Security 276

Security Affairs

FEBRUARY 16, 2024

Threat actors compromised the websites running vulnerable versions of the popular CMS, including 4.4.20, 5.0.21, 5.1.18 Evidence gathered by the experts suggests that that campaign may have begun as early as November 2023. Turla operators used compromised WordPress websites as C2 for the TinyTurla-NG backdoor. php or block[.]old[.]php.

CMS 342

CMS File names Passwords Access 342