CVE-2021-1675: Incomplete Patch and Leaked RCE Exploit, (Wed, Jun 30th)
[preliminary. please let us know if we missed something or made any mistakes]
Continue reading CVE-2021-1675: Incomplete Patch and Leaked RCE Exploit, (Wed, Jun 30th)
Author Archives: SANS Internet Storm Center, InfoCON: green
ISC Stormcast For Wednesday, June 30th, 2021 https://isc.sans.edu/podcastdetail.html?id=7564, (Wed, Jun 30th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Wednesday, June 30th, 2021 https://isc.sans.edu/podcastdetail.html?id=7564, (Wed, Jun 30th)
June 2021 Forensic Contest: Answers and Analysis, (Wed, Jun 30th)
ISC Stormcast For Tuesday, June 29th, 2021 https://isc.sans.edu/podcastdetail.html?id=7562, (Tue, Jun 29th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Tuesday, June 29th, 2021 https://isc.sans.edu/podcastdetail.html?id=7562, (Tue, Jun 29th)
Diving into a Google Sweepstakes Phishing E-mail, (Tue, Jun 29th)
I was recently forwarded another phishing e-mail to examine. This time, it was an e-mail that claimed to be from Google. The e-mail included a pdf file, and instructed the recipient download the file for further information. Figure 1 below shows the headers, while Figure 2 shows the content of the e-mail message.
Continue reading Diving into a Google Sweepstakes Phishing E-mail, (Tue, Jun 29th)
CFBF Files Strings Analysis, (Mon, Jun 28th)
The Office file format that predates the OOXML format, is a binary format based on the CFBF format. I informally call this the ole file format.
Continue reading CFBF Files Strings Analysis, (Mon, Jun 28th)
ISC Stormcast For Monday, June 28th, 2021 https://isc.sans.edu/podcastdetail.html?id=7560, (Mon, Jun 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License. Continue reading ISC Stormcast For Monday, June 28th, 2021 https://isc.sans.edu/podcastdetail.html?id=7560, (Mon, Jun 28th)
DIY CD/DVD Destruction, (Sun, Jun 27th)
I have some personal CDs &#;x26; DVDs to dispose of. And I don&#;x26;#;39;t want them to reamain (easily) readable.
CVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability, (Sat, Jun 26th)
This XML External Entity injection (XXE) vulnerability disclosed in March 2019 is still actively scanned for a vulnerable mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10. This exploit attempts to read the Zimbra configuration file that contains an LDAP password for the zimbra account.
Continue reading CVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability, (Sat, Jun 26th)
CVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability, (Sat, Jun 26th)
This XML External Entity injection (XXE) vulnerability disclosed in March 2019 is still actively scanned for a vulnerable mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10. This exploit attempts to read the Zimbra configuration file that contains an LDAP password for the zimbra account.
Continue reading CVE-2019-9670: Zimbra Collaboration Suite XXE vulnerability, (Sat, Jun 26th)