Security News

Trojan.Win32.Siscos.bqe / Insecure Permissions

Full Disclosure - 7 May, 2021 - 10:51

Posted by malvuln on May 07

Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source:
https://malvuln.com/advisory/b4a35ae6dcceea6390769829b4e1506f.txt
Contact: malvuln13 () gmail com
Media: twitter.com/malvuln

Threat: Trojan.Win32.Siscos.bqe
Vulnerability: Insecure Permissions
Description: The malware creates a insecure dir named "Windupdt" under c:\
drive and grants change (C) permissions to the authenticated user group.
Standard users can rename the...

Trojan.Win32.Agent.xdtv / Insecure Permissions

Full Disclosure - 7 May, 2021 - 10:51

Posted by malvuln on May 07

Discovery / credits: Malvuln - malvuln.com (c) 2021
Original source:
https://malvuln.com/advisory/ffa9b76f9549a2c46415c855a0911e8a.txt
Contact: malvuln13 () gmail com
Media: twitter.com/malvuln

Threat: Trojan.Win32.Agent.xdtv
Vulnerability: Insecure Permissions
Description: The malware creates an insecure installation dir under
"C:\Program Files (x86)" and grants full (F) permissions to the Everyone
user group. Standard users can...

Four vulnerabilities found in MikroTik's RouterOS

Full Disclosure - 7 May, 2021 - 10:50

Posted by Q C on May 07

Advisory: four vulnerabilities found in MikroTik's RouterOS

Details
=======

Product: MikroTik's RouterOS
Vendor URL: https://mikrotik.com/
Vendor Status: no fix yet
CVE: CVE-2020-20214, CVE-2020-20222, CVE-2020-20236, CVE-2020-20237
Credit: Qian Chen(@cq674350529) of Qihoo 360 Nirvan Team

Product Description
==================

RouterOS is the operating system used on the MikroTik's devices, such as
switch, router and access...

Re: Four vulnerabilities found in MikroTik's RouterOS

Full Disclosure - 7 May, 2021 - 10:49

Posted by Q C on May 07

[Update 2021/05/05] Two CVEs have been assigned to two of these
vulnerabilities.

CVE-2020-20254: Mikrotik RouterOs before 6.47 (stable tree) suffers from a
memory corruption vulnerability in the /nova/bin/lcdstat process. An
authenticated remote attacker can cause a Denial of Service (NULL pointer
dereference).

CVE-2020-20253: Mikrotik RouterOs before 6.47 (stable tree) in the
/nova/bin/lcdstat process. An authenticated remote attacker can...

Re: Two vulnerabilities found in MikroTik's RouterOS

Full Disclosure - 7 May, 2021 - 10:49

Posted by Q C on May 07

[Update 2021/05/05] Two CVEs have been assigned to these vulnerabilities.

CVE-2020-20267: Mikrotik RouterOs before 6.47 (stable tree) suffers from a
memory corruption vulnerability in the /nova/bin/resolver process. An
authenticated remote attacker can cause a Denial of Service due to invalid
memory access.

CVE-2020-20225: Mikrotik RouterOs before 6.47 (stable tree) suffers from an
assertion failure vulnerability in the /nova/bin/user process....

Re: Three vulnerabilities found in MikroTik's RouterOS

Full Disclosure - 7 May, 2021 - 10:49

Posted by Q C on May 07

[Update 2021/05/04] Three CVEs have been assigned to these vulnerabilities.

CVE-2020-20266: Mikrotik RouterOs before 6.47 (stable tree) suffers from a
memory corruption vulnerability in the /nova/bin/dot1x process. An
authenticated remote attacker can cause a Denial of Service (NULL pointer
dereference).

CVE-2020-20264: Mikrotik RouterOs before 6.47 (stable tree) in the
/ram/pckg/advanced-tools/nova/bin/netwatch process. An authenticated remote...

Re: Three vulnerabilities found in MikroTik's RouterOS

Full Disclosure - 7 May, 2021 - 10:49

Posted by Q C on May 07

[update 2021/05/04] Three CVEs have been assigned to these vulnerabilities.

CVE-2020-20215: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a
memory corruption vulnerability in the /nova/bin/diskd process. An
authenticated remote attacker can cause a Denial of Service due to invalid
memory access.

CVE-2020-20216: Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a
memory corruption vulnerability in the /nova/bin/graphing process. An...

APPLE-SA-2021-05-03-3 watchOS 7.4.1

Full Disclosure - 4 May, 2021 - 10:36

Posted by Apple Product Security via Fulldisclosure on May 04

APPLE-SA-2021-05-03-3 watchOS 7.4.1

watchOS 7.4.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT212339.

WebKit
Available for: Apple Watch Series 3 and later
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution. Apple is aware of a report that this issue
may have been actively exploited.
Description: A memory corruption issue was...

APPLE-SA-2021-05-03-4 macOS Big Sur 11.3.1

Full Disclosure - 4 May, 2021 - 10:36

Posted by Apple Product Security via Fulldisclosure on May 04

APPLE-SA-2021-05-03-4 macOS Big Sur 11.3.1

macOS Big Sur 11.3.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT212335.

WebKit
Available for: macOS Big Sur
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution. Apple is aware of a report that this issue
may have been actively exploited.
Description: A memory corruption issue was addressed...

APPLE-SA-2021-05-03-1 iOS 14.5.1 and iPadOS 14.5.1

Full Disclosure - 4 May, 2021 - 10:36

Posted by Apple Product Security via Fulldisclosure on May 04

APPLE-SA-2021-05-03-1 iOS 14.5.1 and iPadOS 14.5.1

iOS 14.5.1 and iPadOS 14.5.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT212336.

WebKit
Available for: iPhone 6s and later, iPad Pro (all models), iPad Air 2
and later, iPad 5th generation and later, iPad mini 4 and later, and
iPod touch (7th generation)
Impact: Processing maliciously crafted web content may lead to...

APPLE-SA-2021-05-03-2 iOS 12.5.3

Full Disclosure - 4 May, 2021 - 10:36

Posted by Apple Product Security via Fulldisclosure on May 04

APPLE-SA-2021-05-03-2 iOS 12.5.3

iOS 12.5.3 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT212341.

WebKit
Available for: iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad
mini 2, iPad mini 3, and iPod touch (6th generation)
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution. Apple is aware of a report that this issue
may have been...