Threat Outbreak Alert RuleID13686: Email Messages Distributing Malicious Software on February 24, 2015

Medium Alert ID: 37562 First Published: 2015 February 25 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13686 and RuleID13686KVR may contain the...

Threat Outbreak Alert RuleID13691: Email Messages Distributing Malicious Software on February 24, 2015

Medium Alert ID: 37564 First Published: 2015 February 24 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13691 may contain the following files: Name |...

Whatsapp Banned Users For Using WhatsApp PLUS App

Are you one of those victims whose WhatsApp app has recently been banned?? Then you must have installed a 3rd-party version of WhatsApp client, like WhatsAppMD or Whatsapp PLUS in your mobile phone for sure. Reportedly after 12 AM IST on 21st January 2015, WhatsApp, the widely popular messaging...

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-8441)

A memory corruption vulnerability has been reported in Adobe Flash Player. Successful exploitation of this vulnerability may allow the attacker to access unmapped memory on the target system...

Adobe Flash Player Double Free (APSB14-24: CVE-2014-0574)

A double free vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error caused by an attempt of the worker thread and the main thread to clear a shared ByteArray simultaneously. This vulnerability could lead to a crash of the player...

Adobe Flash Player Type Confusion (APSB14-24: CVE-2014-0584)

A type confusion vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while handling a specially crafted SWF file. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted SWF file with an...

[SECURITY] Fedora 20 Update: mingw-jasper-1.900.1-24.fc20

MinGW Windows Jasper library...

Adobe Flash Player Memory Corruption (APSB14-24: CVE-2014-0576)

A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in Adobe Flash Player while parsing a specially crafted SWF file. A remote attacker can exploit this issue by enticing a victim to open a specially crafted SWF file...

Mac OS X IOKit Keyboard Driver Root Privilege Escalation Exploit

A heap overflow in IOHIKeyboardMapper::parseKeyMapping allows kernel memory corruption in Mac OS X before 10.10. By abusing a bug in the IORegistry, kernel pointers can also be leaked, allowing a full kASLR bypass. Tested on Mavericks 10.9.5, and should work on previous versions. The issue has be...

Mac OS X IOKit Keyboard Driver Root Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex' class Metasploit3 'Mac OS X IOKit Keyboard Driver Root Privilege Escalation', 'Description' = %q A heap overflow in...

Threat Outbreak Alert RuleID12531: Email Messages Distributing Malicious Software on November 23, 2014

Medium Alert ID: 36512 First Published: 2014 November 24 14:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12531 may contain the following files: Name |...

CVE-2014-8387

creationtimestamp| type| source ---|---|--- 2014-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35357...

Adobe Flash Player Multiple Vulnerabilities (APSB14-24) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

flash-plugin: multiple code execution flaws (APSB14-24)

Use-after-free vulnerability in Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allows attackers to execute...

flash-plugin: multiple code execution flaws (APSB14-24)

Adobe Flash Player before 13.0.0.252 and 14.x and 15.x before 15.0.0.223 on Windows and OS X and before 11.2.202.418 on Linux, Adobe AIR before 15.0.0.356, Adobe AIR SDK before 15.0.0.356, and Adobe AIR SDK & Compiler before 15.0.0.356 allow attackers to execute arbitrary code or cause a denial o...

Adobe Releases Security Updates for Flash Player

Adobe has released security updates to address multiple vulnerabilities in Flash Player, one of which could potentially allow an attacker to take control of the affected system. Users and administrators are encouraged to review Adobe Security Bulletin APSB 14-24 and apply the necessary updates...

Threat Outbreak Alert RuleID12071: Email Messages Distributing Malicious Software on October 24, 2014

Medium Alert ID: 36181 First Published: 2014 October 24 12:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID12071 may contain the following files: Name |...

CVE-2014-7353

The JAZAN 24 aka com.jazan24.Mcreda application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The JAZAN 24 aka com.jazan24.Mcreda application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7353

The CVE-2014-7353 entry concerns the JAZAN 24 Android app (com.jazan24.Mcreda) version 1.0 that fails to verify SSL X.509 certificates. The root cause is improper certificate validation, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certific...