Read Time:1 Second
Post Content
Category Archives: Advisories
DSA-5113 firefox-esr – security update
Read Time:8 Second
Multiple security issues have been found in the Mozilla Firefox web
browser, which could potentially result in the execution of arbitrary
code, information disclosure or spoofing.
stargz-snapshotter-0.10.2-1.fc34
Read Time:7 Second
FEDORA-2022-e244ad73d6
Packages in this update:
stargz-snapshotter-0.10.2-1.fc34
Update description:
Security fix for CVE-2022-21698
Borat RAT: New RAT with Ransomware Capability
Read Time:55 Second
FortiGuard Labs is aware of a report that a new Remote Access Trojan (RAT) called “Borat” is sold in underground forums. The RAT provides not only typical RAT capabilities such as keylogging, audio and webcam recording, and browser credential stealing to cybercriminals, but also offers file encryption and decryption capability as well as creating a ransom note on the victim’s machine.Why is this Significant?This is significant because Borat RAT not only enables cybercriminals to perform typical RAT activities but also provides ransomware capabilities as well.What Functionalities Does Borat RAT Provide?Borat RAT allows an attacker to perform the following activities:KeyloggingRansomware activities such as encrypting and decrypting files as well as creating a ransom note on the victim’s machineDistributed Denial of Service (DDoS)Audio and webcam recordingRemote desktopReverse proxySteals device infoProcess hollowingCredential stealingDiscord token stealingPlay audioSwap mouse buttonsHold mouseShow and hide the Desktop and the taskbarEnable and disable webcam lightHang systemTurn off the monitorDisplay blank screen What is the Status of Coverage?FortiGuard Labs provides the following AV coverage for Borat RAT:MSIL/Agent.CFQ!trMSIL/Keylogger.DUS!trMalicious_Behavior.SB
stargz-snapshotter-0.10.2-1.fc35
Read Time:7 Second
FEDORA-2022-a7d438b30b
Packages in this update:
stargz-snapshotter-0.10.2-1.fc35
Update description:
Security fix for CVE-2022-21698
CVE-2020-19229
Read Time:12 Second
Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute arbitrary commands via the rememberMe parameter.
CVE-2020-23349
Read Time:10 Second
An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 (com.sina.weibo.sdk.share.WbShareTransActivity), any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity.
CVE-2020-28847
Read Time:6 Second
Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.
USN-5365-1: H2 vulnerabilities
Read Time:16 Second
It was discovered that H2 was vulnerable to deserialization of
untrusted data. An attacker could possibly use this issue to
execute arbitrary code. (CVE-2021-42392)
It was discovered that H2 incorrectly handled some specially
crafted connection URLs. An attacker could possibly use this
issue to execute arbitrary code. (CVE-2022-23221)
openscad-2021.01-8.fc35
Read Time:7 Second
FEDORA-2022-3012e64f8c
Packages in this update:
openscad-2021.01-8.fc35
Update description:
Security fixes for CVE-2022-0496 and CVE-2022-0497