Sierra Wireless AirLink ES450 ACEManager Information Exposure Exploit

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...

CVE-2017-16558

creationtimestamp| type| source ---|---|--- 2019-04-25 20:32:33+00:00| seen| https://t.me/cibsecurity/3946...

Adobe Bridge CC Security Updates (APSB19-25) - Windows

Adobe Bridge CC is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:bridgecc";...

RIPS 3.1: TeamCity, LDAP and JSP Support

Compliance Management Compliance to industry standards is a major topic in todays product development strategies. We revised our compliance tab that now provides an efficient overview of all violations against industry standard requirements that were found during RIPS code analysis. Developers ca...

CVE-2014-9187

creationtimestamp| type| source ---|---|--- 2019-03-25 23:27:15+00:00| seen| https://t.me/cibsecurity/3341...

CVE-2014-9189

creationtimestamp| type| source ---|---|--- 2019-03-25 23:27:14+00:00| seen| https://t.me/cibsecurity/3340...

CVE-2017-7340

creationtimestamp| type| source ---|---|--- 2019-03-25 23:27:13+00:00| seen| https://t.me/cibsecurity/3339...

CVE-2015-1014

creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:32+00:00| seen| https://t.me/cibsecurity/3334...

CVE-2015-3956

creationtimestamp| type| source ---|---|--- 2019-03-25 21:27:31+00:00| seen| https://t.me/cibsecurity/3333...

CVE-2015-3952

creationtimestamp| type| source ---|---|--- 2019-03-25 19:27:42+00:00| seen| https://t.me/cibsecurity/3331...

CVE-2017-9362

creationtimestamp| type| source ---|---|--- 2019-03-25 19:27:39+00:00| seen| https://t.me/cibsecurity/3328...

CVE-2017-9376

creationtimestamp| type| source ---|---|--- 2019-03-25 19:27:38+00:00| seen| https://t.me/cibsecurity/3327...

About the security content of Xcode 10.2

About the security content of Xcode 10.2 This document describes the security content of Xcode 10.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Flash Player < 30.0.0.154 Multiple Vulnerabilities (APSB18-25)

Binary data 700436.prm...

PT-2019-18455 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-25 Description: The issue is related to memory leaks in the DecodeImage function within the coders/pcd.c file. Recommendations: For versions prior to 7.0.8-25, update to version 7.0.8-25 or later to resolve...

FileZilla 3.40.0 Denial Of Service Exploit

Exploit Title: FileZilla 3.40.0 - "Local search" Denial of Service PoC Discovery by: Mr Winst0n Vendor Homepage: https://filezilla-project.org Software Link : https://filezilla-project.org/download.php?type=client&showall=1 Tested Version: 3.40.0 Tested on: Kali linux x8664 Vulnerability Type:...

FileZilla 3.40.0 Denial Of Service

Exploit Title: FileZilla 3.40.0 - "Local search" Denial of Service PoC Discovery by: Mr Winst0n Discovery Date: February 20, 2019 Vendor Homepage: https://filezilla-project.org Software Link : https://filezilla-project.org/download.php?type=client&showall=1 Tested Version: 3.40.0 Tested on: Kali...

Memory corruption

In ImageMagick before 7.0.8-25, a memory leak exists in WriteDIBImage in coders/dib.c...

PT-2019-6085 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.8-25 Description: The issue is related to a memory leak in the WriteDIBImage component of the ImageMagick console graphic editor. This memory leak occurs due to incorrect memory deallocation before the last...

Threat Roundup for Jan. 25 to Feb. 1

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Jan. 25 and Feb. 01. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...