Threat Outbreak Alert RuleID29629: Email Messages Distributing Malicious Software on June 29, 2017

Medium Alert ID: 54329 First Published: 2017 June 29 18:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29629 may contain the following files: Name | Siz...

javout.net XSS vulnerability

Vulnerable URL: https://javout.net/?s=a%27aa%22onfocus=prompt/OPENBUGBOUNTY/%20autofocus=x%20bad=--%3E%3C/title%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.09.2017 Vulnerability type:| XSS...

TippingPoint Threat Intelligence and Zero-Day Coverage – Week of May 29, 2017

“Anything that can go wrong will go wrong.” It’s not exactly clear how Murphy’s Law originated, but it seems to always make an appearance at the one time you can’t afford for anything to go wrong. Your laptop starts to malfunction right as you need to finish a project this happened to yours truly...

Threat Outbreak Alert RuleID29325: Email Messages Distributing Malicious Software on May 29, 2017

Medium Alert ID: 53993 First Published: 2017 May 30 18:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29325 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29313: Email Messages Distributing Malicious Software on May 29, 2017

Medium Alert ID: 53992 First Published: 2017 May 30 18:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29313 may contain the following files: Name | Size...

Threat Outbreak Alert RuleID29302: Email Messages Distributing Malicious Software on May 29, 2017

Medium Alert ID: 53991 First Published: 2017 May 30 18:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29302 may contain the following files: Name | Size...

facebook.com Open Redirect vulnerability

Vulnerable URL:...

Heap overflow

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29...

ilmercato.eu XSS vulnerability

Vulnerable URL: http://www.ilmercato.eu/index.php?aprip=10002f=34=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 37188...

PYSEC-2017-101

Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpccalldestroy function in core/lib/surface/call.c...

vspy.guildlaunch.net XSS vulnerability

Vulnerable URL: http://vspy.guildlaunch.net/srv/vspy.php?Address=%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=6176 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

crossroadsma.org XSS vulnerability

Open Bug Bounty ID: OBB-229203 Description| Value ---|--- Affected Website:| crossroadsma.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

librosylibros.co XSS vulnerability

Vulnerable URL:...

FreeBSD : chromium -- multiple vulnerabilities (95a74a48-2691-11e7-9e2d-e8e0b747a45a)

Google Chrome Releases reports : 29 security fixes in this release, including : - 695826 High CVE-2017-5057: Type confusion in PDFium. Credit to Guang Gong of Alpha Team, Qihoo 360 - 694382 High CVE-2017-5058: Heap use after free in Print Preview. Credit to Khalil Zhani - 684684 High CVE-2017-505...

Xen - Broken Check in memory_exchange() Permits PV Guest Breakout

Xen - Broken Check in memoryexchange Permits PV Guest Breakout Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1184 This bug report describes a vulnerability in memoryexchange that permits PV guest kernels to write to an arbitrary virtual address with hypervisor privileges. The...

xen-kernel -- broken check in memory_exchange() permits PV guest breakout

The Xen Project reports: The XSA-29 fix introduced an insufficient check on XENMEMexchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays. A malicious or buggy 64-bit PV guest may be able to access all of system memory, allowing fo...

Threat Outbreak Alert RuleID28518: Email Messages Distributing Malicious Software on March 29, 2017

Medium Alert ID: 53217 First Published: 2017 March 29 19:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28518 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID28534: Email Messages Distributing Malicious Software on March 29, 2017

Medium Alert ID: 53215 First Published: 2017 March 29 15:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28534 may contain the following files: Name | Si...

Adobe Flash Player Within Google Chrome Security Update (APSB16-29) - Mac OS X

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayerchrome"...

GLSA-201701-29 : Vim, gVim: Remote execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201701-29 Vim, gVim: Remote execution of arbitrary code Vim and gVim do not properly validate values for the filetype, syntax, and keymap options. Impact : A remote attacker could entice a user to open a specially crafted file usi...