September 2023 - rwth-security - lists.rwth-aachen.de

Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks
by Bernd Kohler 07 Sep '23

07 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks" VG Bernd [0] https://thehackernews.com/2023/09/mirai-botnet-variant-pandora-hijacks.html -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Wordpress - Media Library Assistant <= 3.09 - Unauthenticated
by Bernd Kohler 06 Sep '23

06 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Media Library Assistant <= 3.09 - Unauthenticated Local/Remote File Inclusion & Remote Code Execution" "... makes it possible for unauthenticated attackers to supply files via FTP that will make directory lists, local file inclusion, and remote code execution possible. ..." --> siehe auch [1] --> PoC auf [2] VG Bernd [0] https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/me… [1] https://patrowl.io/blog-wordpress-media-library-rce-cve-2023-4634/ [2] https://github.com/Patrowl/CVE-2023-4634 -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de https://www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0

Mashing enter to bypass full disk encryption with tpm, clevis, dracut
by Bernd Kohler 03 Sep '23

03 Sep '23

Hallo zusammen, sofern nicht selber schon gesehen/-lesen hier [0] FYI "Mashing enter to bypass full disk encryption with tpm, clevis, dracut and systemd" VG Bernd [0] https://pulsesecurity.co.nz/advisories/tpm-luks-bypass -- Bernd Kohler IT Center Abteilung: Netze RWTH Aachen University Wendlingweg 10 52074 Aachen Tel: +49 241 80-29793 Fax: +49 241 80-22666 kohler(a)itc.rwth-aachen.de www.itc.rwth-aachen.de Social Media Kanäle des IT Centers: https://blog.rwth-aachen.de/itc/ https://www.facebook.com/itcenterrwth https://www.linkedin.com/company/itcenterrwth https://twitter.com/ITCenterRWTH https://www.youtube.com/channel/UCKKDJJukeRwO0LP-ac8x8rQ

1 0