Vulnerability | Seite 11 von 11

CVE-2023-29357 Erkennung: Ausnutzung der Microsoft SharePoint Server-Berechtigungseskalationsanfälligkeit kann zu einer Pre-Auth-RCE-Kette führen

September 27, 2023

Schlagwörter: CVE, Detection Content, Sigma, SOC Prime Platform, Threat Detection Marketplace, Threat Hunting Content, Vulnerability

Bedrohungsakteure richten häufig ihr Augenmerk auf Microsoft SharePoint Server-Produkte, indem sie eine Reihe von RCE-Schwachstellen ausnutzen, wie z.B. CVE-2022-29108 and CVE-2022-26923. Im Frühsommer 2023 hat Microsoft einen Patch für die neu entdeckte SharePoint Server Privilegienerweiterungs-Schwachstelle, bekannt als CVE-2023-29357, herausgegeben, die als kritisch angesehen wird. Mit dem kürzlich veröffentlichten PoC-Exploit für CVE-2023-29357 können Angreifer Administratorprivilegien erlangen, […]

CVE-2023-38146 Erkennung: Windows „ThemeBleed“ RCE-Schwachstelle birgt steigende Risiken mit der Veröffentlichung des PoC-Exploits

September 19, 2023

Schlagwörter: CVE, Cyberattack, Detection Content, Sigma, SOC Prime Platform, Threat Detection Marketplace, Threat Hunting Content, Vulnerability

Der neue Microsoft Windows Themes-Sicherheitsfehler, der als CVE-2023-38146 verfolgt wird und Angreifern erlaubt, RCE auszuführen, taucht in der Cyber-Bedrohungsarena auf. Der Proof of Concept (PoC)-Exploit für diese Schwachstelle, auch bekannt als „ThemeBleed“, wurde kürzlich auf GitHub veröffentlicht und stellt eine Bedrohung für potenziell infizierte Windows-Systeme dar, wobei er die Aufmerksamkeit der Verteidiger auf sich zieht. […]

CVE-2023-4634-Erkennung: Unauthentifizierte RCE-Schwachstelle im WordPress Media Library Assistant Plugin

September 08, 2023

Schlagwörter: CVE, Detection Content, Sigma, SOC Prime Platform, Threat Bounty Program, Vulnerability

Sicherheitsforscher haben eine ernste Warnung vor einer kritischen Schwachstelle, bezeichnet als CVE-2023-4634, ausgegeben, die eine alarmierende Anzahl von über 70.000 WordPress-Seiten weltweit betrifft. Diese Schwachstelle geht auf ein Sicherheitsproblem im WordPress Media Library Assistant Plugin zurück, einem äußerst beliebten und weit verbreiteten Plugin innerhalb der WordPress-Community. Da diese Schwachstelle bereits aktiv ausgenutzt wird und ein […]

Stärkung der Cybersicherheit in der Finanzbranche mit den Lösungen von SOC Prime

September 07, 2023

Schlagwörter: APT, Cyberattack, Detection Content, FIN7, Lazarus, Malware, Sigma, SOC Prime Platform, Threat Detection Marketplace, Threat Hunting Content, Vulnerability

Der Finanzsektor, das Herzstück der globalen Wirtschaft, hat sich in den letzten Jahren zunehmend digitalisiert. Während dieser Wandel Effizienz und Bequemlichkeit mit sich bringt, setzt er Finanzinstitute auch zahlreichen Herausforderungen im Bereich der Cybersicherheit aus. Bedrohungsakteure, die von hochentwickelten Hackergruppen bis hin zu opportunistischen Einzelpersonen reichen, zielen ständig auf den Finanzsektor ab und versuchen, Schwachstellen […]

CVE-2023-38831 Erkennung: UAC-0057 Gruppe nutzt einen WinRAR Zero-Day aus, um eine PicassoLoader-Variante und CobaltStrike Beacon über den Rabbit-Algorithmus zu verbreiten

September 01, 2023

Schlagwörter: CERT-UA, CERTUA, CVE, Cyberattack, Detection Content, Malware, Sigma, SOC Prime Platform, Threat Detection Marketplace, Threat Hunting Content, Vulnerability

The Hacker-Gruppe UAC-0057, auch bekannt als GhostWriter, tritt erneut in der Cyberbedrohungsarena auf, indem sie eine WinRAR Zero-Day-Schwachstelle ausnutzt, die als CVE-2023-38831 verfolgt wird und seit April bis August 2023 aktiv ausgenutzt wurde. Die erfolgreiche Ausnutzung von CVE-2023-38831 ermöglicht es Angreifern, die Zielsysteme mit einem PicassoLoader -Variante und Cobalt Strike Beacon Malware zu infizieren. Bemerkenswert […]

Erkennung von Exploits bei Junos OS-Schwachstellen: Hacker nutzen CVE-2023-36844 RCE-Fehlerkette aus und missbrauchen Juniper-Geräte nach PoC-Veröffentlichung

August 31, 2023

Schlagwörter: CVE, Detection Content, Sigma, SOC Prime Platform, Threat Detection Marketplace, Threat Hunting Content, Vulnerability

Gegner nutzen vier neu entdeckte RCE-Sicherheitslücken in der J-Web-Komponente der Junos OS aus, die als CVE-2023-36844, CVE-2023-36845, CVE-2023-36846 und CVE-2023-36847 bekannt sind. Die identifizierten Schwachstellen können miteinander verknüpft werden, wodurch Angreifer in der Lage sind, beliebigen Code auf den kompromittierten Instanzen auszuführen. Nach der Offenlegung eines PoC-Exploits zur Verkettung der Juniper JunOS-Schwächen sensibilisieren Cyber-Verteidiger über […]

CVE-2023-3519 Erkennung: RCE Zero-Day in Citrix NetScaler ADC und NetScaler Gateway in freier Wildbahn ausgenutzt

August 18, 2023

Schlagwörter: CVE, Detection Content, Sigma, SOC Prime Platform, Threat Hunting Content, Vulnerability

Achtung! Cybersicherheitsexperten benachrichtigen Verteidiger über eine Zero-Day-Schwachstelle, die den Citrix NetScaler Application Delivery Controller (ADC) und NetScaler Gateway Appliances gefährdet. Die als CVE-2023-3519 verfolgte Schwachstelle kann zu RCE führen und wird aktiv von Angreifern in der freien Wildbahn ausgenutzt, nachdem der PoC-Exploit auf GitHub veröffentlicht wurde. Erkennen Sie Versuche zur Ausnutzung von CVE-2023-3519 Das zunehmende […]

Erkennung der CVE-2023-35078 Ausnutzung: Kritische Authentifizierungsumgehung Zero-Day in Ivanti Endpoint Manager Mobile (EPMM)

Juli 26, 2023

Schlagwörter: CVE, Cyberattack, Detection Content, Sigma, SOC Prime Platform, Threat Hunting Content, Vulnerability, Zero-Day

Cybersecurity-Warnung! Nach einer Reihe von Sicherheitslücken in der Pulse Connect Secure SSL VPN-Appliance die 2021 mehrere Organisationen betroffen haben, wurde kürzlich eine neue kritische Zero-Day-Schwachstelle in Ivanti-Produkten aufgedeckt. Das neue Sicherheitsproblem, das Ivanti Endpoint Manager Mobile (EPMM) betrifft, ermöglicht einen nicht authentifizierten Fernzugriff auf bestimmte API-Pfade. Durch Ausnutzung der Schwachstelle könnten Angreifer persönlich identifizierbare Informationen […]

Herausforderungen der Cloud-Sicherheit für Unternehmen

Oktober 02, 2020

Schlagwörter: cloud, Vulnerability

Cloud-Dienste sind ein unverzichtbarer Bestandteil moderner Unternehmensinfrastrukturen, über 70% der Organisationen weltweit arbeiten vollständig oder teilweise in der Cloud, wie berichtet von der Cloud Security Alliance. Cloud-Dienstanbieter bieten auch zusätzliche Sicherheitsmaßnahmen, wie automatisierte Bedrohungserkennung. Aber laut Statistiken sind bis zu 90% aller Cybersicherheitsexperten jetzt besorgt über Cloud-Sicherheitsprobleme, was 11% mehr ist im Vergleich zu den […]

Name	Descripiton
PHPSESSID	Preserves user session state across page requests. Cookie generated by applications based on the PHP language. This is a general purpose identifier used to maintain user session variables. It is normally a random generated number, how it is used can be specific to the site, but a good example is maintaining a logged-in status for a user between pages.
sp_i	Used to store information about authenticated User.
sp_r	Used to store information about authenticated User.
sp_a	Used to store information about authenticated User.

Name	Descripiton
tuuid	Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded.
tuuid_last_update	Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded.
um	Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded.
umeh	Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded.
na_sc_x	Used by the social sharing platform AddThis to keep a record of parts of the site that has been visited in order to recommend other parts of the site.
APID	Collects anonymous data related to the user's visits to the website.
IDSYNC	Collects anonymous data related to the user's visits to the website.
_cc_aud	Collects anonymous statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to segment the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.
_cc_cc	Collects anonymous statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to segment the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.
_cc_dc	Collects anonymous statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to segment the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.
_cc_id	Collects anonymous statistical data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The purpose is to segment the website's users according to factors such as demographics and geographical location, in order to enable media and marketing agencies to structure and understand their target groups to enable customised online advertising.
dpm	Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads.
acs	Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.
clid	Collects anonymous data related to the user's visits to the website, such as the number of visits, average time spent on the website and what pages have been loaded, with the purpose of displaying targeted ads.
KRTBCOOKIE_#	Registers a unique ID that identifies the user's device during return visits across websites that use the same ad network. The ID is used to allow targeted ads.
PUBMDCID	Registers a unique ID that identifies the user's device during return visits across websites that use the same ad network. The ID is used to allow targeted ads.
PugT	Registers a unique ID that identifies the user's device during return visits across websites that use the same ad network. The ID is used to allow targeted ads.
ssi	Registers a unique ID that identifies a returning user's device. The ID is used for targeted ads.
_tmid	Registers a unique ID that identifies the user's device upon return visits. The ID is used to target ads in video clips.
wam-sync	Used by the advertising platform Weborama to determine the visitor's interests based on pages visits, content clicked and other actions on the website.
wui	Used by the advertising platform Weborama to determine the visitor's interests based on pages visits, content clicked and other actions on the website.
AFFICHE_W	Used by the advertising platform Weborama to determine the visitor's interests based on pages visits, content clicked and other actions on the website.
B	Collects anonymous data related to the user's website visits, such as the number of visits, average time spent on the website and what pages have been loaded. The registered data is used to categorise the users' interest and demographical profiles with the purpose of customising the website content depending on the visitor.
1P_JAR	These cookies are used to gather website statistics, and track conversion rates.
APISID	Google set a number of cookies on any page that includes a Google reCAPTCHA. While we have no control over the cookies set by Google, they appear to include a mixture of pieces of information to measure the number and behaviour of Google reCAPTCHA users.
HSID	Google set a number of cookies on any page that includes a Google reCAPTCHA. While we have no control over the cookies set by Google, they appear to include a mixture of pieces of information to measure the number and behaviour of Google reCAPTCHA users.
NID	Google set a number of cookies on any page that includes a Google reCAPTCHA. While we have no control over the cookies set by Google, they appear to include a mixture of pieces of information to measure the number and behaviour of Google reCAPTCHA users.
SAPISID	Google set a number of cookies on any page that includes a Google reCAPTCHA. While we have no control over the cookies set by Google, they appear to include a mixture of pieces of information to measure the number and behaviour of Google reCAPTCHA users.
SID	Google set a number of cookies on any page that includes a Google reCAPTCHA. While we have no control over the cookies set by Google, they appear to include a mixture of pieces of information to measure the number and behaviour of Google reCAPTCHA users.
SIDCC	Security cookie to protect users data from unauthorised access.
SSID	Google set a number of cookies on any page that includes a Google reCAPTCHA. While we have no control over the cookies set by Google, they appear to include a mixture of pieces of information to measure the number and behaviour of Google reCAPTCHA users.
__utmx	This cookie is associated with Google Website Optimizer, a tool designed to help site owners improve their wbesites. It is used to distinguish between two varaitions a webpage that might be shown to a visitor as part of an A/B split test. This helps site owners to detemine which version of a page performs better, and therefore helps to improve the website.
__utmxx	This cookie is associated with Google Website Optimizer, a tool designed to help site owners improve their wbesites. It is used to distinguish between two varaitions a webpage that might be shown to a visitor as part of an A/B split test. This helps site owners to detemine which version of a page performs better, and therefore helps to improve the website.

Name	Descripiton
_hjid	Hotjar cookie. This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the random user ID, unique to that site on the browser. This ensures that behavior in subsequent visits to the same site will be attributed to the same user ID.
_hjIncludedInSample	This cookie is associated with web analytics functionality and services from Hot Jar, a Malta based company. It uniquely identifies a visitor during a single browser session and indicates they are included in an audience sample.
intercom-id-[xxx]	This cookie is used by Intercom as a session so that users can continue a chat as they move through the site.
intercom-session-[xxx]	Used to keeping track of sessions and remember logins and conversations.
demdex	Via a unique ID that is used for semantic content analysis, the user's navigation on the website is registered and linked to offline data from surveys and similar registrations to display targeted ads.
CookieConsent	Stores the user's cookie consent state for the current domain.
__cfduid	Used by the content network, Cloudflare, to identify trusted web traffic.
ss	These cookies enable the website to provide enhanced functionality and personalisation . They may be set by us or by third party providers whose services we have added to our pages. These services may include the Live Chat facility, Contact Us form(s), the Product Quotation forms and submission process, and the Email Newsletter sign up functionality .

Name	Descripiton
_ga	This cookie name is asssociated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page. Registers a unique ID that is used to generate statistical data on how the visitor uses the website. request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.
_gat	Used by Google Analytics to throttle request rate. This cookie name is associated with Google Universal Analytics, according to documentation it is used to throttle the request rate - limiting the collection of data on high traffic sites. It expires after 10 minutes.
_gid	This cookie name is asssociated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited. Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
IDE	Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.
r/collect	Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user.
test_cookie	Used to check if the user's browser supports cookies.
collect	Used to send data to Google Analytics about the visitor's device and behaviour. Tracks the visitor across devices and marketing channels.
ads/user-lists/#	These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites.
c	Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.
khaos	Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.
put_#	Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.
rpb	Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.
rpx	Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.
tap.php	Registers anonymised user data, such as IP address, geographical location, visited websites, and what ads the user has clicked, with the purpose of optimising ad display based on the user's movement on websites that use the same ad network.

Tag: Vulnerability

Search:

Follow us on:

Archive

Tags