Threats tagged 'web'

The malware framework targets web applications and cloud environments, including AWS, Docker, Kubernetes, and more. The post ‘PCPJack’ Worm Removes TeamPCP Infections, Steals Credentials appeared first on SecurityWeek .

From service accounts to AI-driven processes, identity is evolving faster than most security programs can adapt. Discover strategies for reducing risk and regaining control. The post Webinar Today: Securing Identity Across Humans, Machines and AI appeared first on SecurityWeek .

[This is a Guest Diary by Eric Roldan, an ISC intern as part of the SANS.edu BACS program]

ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF)

Bludit CMS 3.18.4 - RCE

LuaJIT 2.1.1774638290 - Arbitrary Code Execution

Ghost CMS 6.19.0 - SQLi

The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM. The post Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations appeared first on SecurityWeek .

Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH)

MindsDB 25.9.1.1 - Path Traversal

Google, Microsoft, Amazon Web Services, Nvidia, OpenAI, Reflection and SpaceX will provide resources to help augment warfighter decision-making in complex operational environments,” the Defense Department said. The post US Military Reaches Deals With 7 Tech Companies to Use Their AI on Classified Systems appeared first on SecurityWeek .

BusyBox 1.37.0 - Path Traversal

HUSTOJ Zip-Slip v26.01.24 - RCE

Repetier-Server 1.4.10 - Path Traversal

Python-Multipart 0.0.22 - Path Traversal

FUXA 1.2.8 - Authentication Bypass + RCE Exploit

JUNG Smart Visu Server 1.1.1050 - Dos

SUSE Manager 4.3.15 - Code Execution

deephas 1.0.7 - Prototype Pollution

Erugo 0.2.14 - Remote Code Execution (RCE)