The CVE-2021-32648 vulnerability lies within the OctoberCMS platform prior to version 1.0.472 and results in an attacker gaining access to any account via a specially crafted account password reset request.


A few were observed displaying a fake error message requiring user click-through to continue execution.


Figure 5.


Configuration XML file CVE-2021-38427 Connext DDS, ROS 2 6.6 CWE-121: Stack-based buffer overflow CVE-2021-38433 Connext DDS, ROS 2 6.6 CVE-2021-38443 Cyclone DDS, ROS 2 6.6 CWE-228: Improper handling of syntactically invalid structure CVE-2021-38441 Cyclone DDS, ROS 2 6.6 CWE-123:


We’ve named the malware family Funtasy, based on the domain it uses for registering compromised phones to the premium SMS service.


After some research, we found multiple Delphi backdoors that used any of the three decryption routines.


Likewise, brute force attacks on internet-facing services like email, Microsoft Autodiscover, SMB, LDAP, and SQL are so common that they may seem like background noise that can be ignored.


The decrypted payload is now running within the runtimebroker.exe memory space.


Organizations can develop defenses against the social engineering component these four threat actors have in common.


Attackers can also install a phishing website on the victim server to gain access to any data that passes through it.


Please mark, I'm not a robot!


To learn more about the ubiquitous problem of end-of-life software, please refer to the 2022 Cortex Xpanse Attack Surface Threat Report.


Code that injects current PID into the second-stage shellcode Hooking "ZwOpenProcess" in ntdll.dll


A backdoor implant is an increasingly common mechanism for maintaining unauthorized access and control over a computer asset.


Each backdoor has a different token that is encrypted in the registry.


With the Capstone.js configured for X86-64 and not ARM, we can also derive the target hardware is Intel-based Macs.


In later versions it was obfuscated with Base64.


This means that attackers can use this vulnerability in apps users get from places other than Google Play.