Wireshark Security Updates (wnpa-sec-2018-05 to wnpa-sec-2018-14) - Windows

Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...

KLA11201 Multiple vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via...

Threat Outbreak Alert RuleID31989: Email Messages Distributing Malicious Software on February 14, 2018

Medium Alert ID: 56822 First Published: 2018 February 14 18:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31989 may contain the following files: Name |...

dre.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-559569 Description| Value ---|--- Affected Website:| dre.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-5459

creationtimestamp| type| source ---|---|--- 2018-02-14 10:45:03+00:00| seen| https://t.me/SecLabNews/1534...

museeduleman.ch XSS vulnerability

Open Bug Bounty ID: OBB-559131 Description| Value ---|--- Affected Website:| museeduleman.ch Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-1189

creationtimestamp| type| source ---|---|--- 2018-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44039...

sukns2.vox.com.my Open Redirect vulnerability

Open Bug Bounty ID: OBB-558326 Description| Value ---|--- Affected Website:| sukns2.vox.com.my Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

search-holland.nl XSS vulnerability

Open Bug Bounty ID: OBB-558299 Description| Value ---|--- Affected Website:| search-holland.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

VMware Workstation 12.x < 12.5.9 / 14.x < 14.1.1 Multiple Vulnerabilities (VMSA-2018-0004) (VMSA-2018-0005) (Spectre)

The version of VMware Workstation installed on the remote Windows host is 14.x prior to 14.1.1 or 12.x prior to 12.5.9. It is, therefore, missing security updates that add hypervisor-assisted guest remediation for a speculative execution vulnerability CVE-2017-5715. These updates will allow guest...

openSUSE Security Update : java-1_7_0-openjdk (openSUSE-2018-14)

This update for java-170-openjdk fixes the following issues : Security issues fixed : - CVE-2017-10356: Fix issue inside subcomponent Security bsc1064084. - CVE-2017-10274: Fix issue inside subcomponent Smart Card IO bsc1064071. - CVE-2017-10281: Fix issue inside subcomponent Serialization...

Asterisk DoS Vulnerability

Asterisk is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if...

supra.cz XSS vulnerability

Open Bug Bounty ID: OBB-453529 Description| Value ---|--- Affected Website:| supra.cz Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

Threat Outbreak Alert RuleID31583: Email Messages Distributing Malicious Software on December 14, 2017

Medium Alert ID: 56268 First Published: 2017 December 14 15:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31583 may contain the following files: Name |...

Threat Outbreak Alert RuleID31618: Email Messages Distributing Malicious Software on December 14, 2017

Medium Alert ID: 56264 First Published: 2017 December 14 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31618 may contain the following files: Name |...

Threat Outbreak Alert RuleID31616: Email Messages Distributing Malicious Software on December 14, 2017

Medium Alert ID: 56263 First Published: 2017 December 14 14:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31616 may contain the following files: Name |...

Threat Outbreak Alert RuleID31515: Email Messages Distributing Malicious Software on December 14, 2017

Medium Alert ID: 56262 First Published: 2017 December 14 13:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31515 may contain the following files: Name |...

Dup Scout Enterprise 10.0.18 Buffer Overflow Exploit

This Metasploit module exploits a stack buffer overflow in Dup Scout Enterprise version 10.0.18. The buffer overflow exists via the web interface during login. This gives NT AUTHORITY\SYSTEM access. This module requires Metasploit: https://metasploit.com/download Current source:...

After 27-Year Sentence, Russian Hacker Faces Another 14 Years in Prison

Roman Valerevich Seleznev, the son of a prominent Russian lawmaker who's already facing a 27-year prison sentence in the United States, has been handed another 14-year prison sentence for his role in an "organized cybercrime ring" that caused $59 Million in damages across the US. In April this...

tltcar.ru XSS vulnerability

Open Bug Bounty ID: OBB-432454 Description| Value ---|--- Affected Website:| tltcar.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...