Threat Outbreak Alert RuleID29006: Email Messages Distributing Malicious Software on May 4, 2017

Medium Alert ID: 53711 First Published: 2017 May 4 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29006 may contain the following files: Name | Size ...

Product update: Virtuozzo 7.0 Update 4 (7.0.4-1025)

The Update 4 for Virtuozzo 7.0 provides new features, a security fix, and stability and usability bug fixes. Vulnerability id: PSBM-60181 A vulnerability in container resource limiting mechanism could potentially lead to DoS attacks...

[SECURITY] Fedora 26 Update: log4j-2.7-4.fc26

Log4j is a tool to help the programmer output log statements to a variety of output targets...

Null pointer dereference

The Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of bfdelflargecomsection. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library,...

bportal.staedteregion-aachen.de XSS vulnerability

Vulnerable URL: https://bportal.staedteregion-aachen.de/login?ppid=1WARsracsucheportletplifecycle=0pstate=maximizedpmode=view Details: Description| Value ---|--- Patched:| Yes, at 04.05.2017 Latest check for patch:| 04.05.2017 07:05 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

PostgreSQL Administration Tool pgAdmin 4 XSS vulnerabilities found and use-vulnerability and early warning-the black bar safety net

This article I'm going to tell you how I find and use pgAdmin4 desktop clientXSSvulnerabilities. In reading this article, please upgrade as soon as possible to 1. 4 version. Foreword Since I am a hand inadvertently to a new MacBookPro on that big ridiculously Touchpad, pgAdmin 4 page constantly...

FreeBSD-SA-17:04.ipfilter

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-17:04.ipfilter Security Advisory The FreeBSD Project Topic: ipfilter4 fragment handling panic Category: contrib Module: ipfilter Announced: 2017-04-27 Credits:...

host-express.pro XSS vulnerability

Vulnerable URL: https://host-express.pro/reg.php?tarif=Windows%20-%204=winhost Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 923480 VIP website status:| No Check host-express.pro...

HPE LoadRunner 'libxdrutil.dll mxdr_string method' RCE Vulnerability

HPE LoadRunner is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Debian DLA-908-1 : chicken security update

It was found that CHICKEN did not sanitize the size argument when allocating SRFI-4 vectors, which could lead to segfaults or buffer overflows with some sizes. For Debian 7 'Wheezy', these problems have been fixed in version 4.7.0-1+deb7u2. We recommend that you upgrade your chicken packages. NOT...

Microsoft Windows - ManagementObject Arbitrary .NET Serialization Remote Code Execution Exploit

Exploit for windows platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1081 Windows: ManagementObject Arbitrary .NET Serialization RCE Platform: .NET 4.6, Powershell 4. Tested between Server 2016 and Windows 10 Anniversary Edition Class: Remote...

CVE-2015-8959

coders/dds.c in ImageMagick before 6.9.0-4 Beta allows remote attackers to cause a denial of service CPU consumption via a crafted DDS file...

ImageMagick 'ReadSVGImage' Function Denial of Service Vulnerability

ImageMagick is a set of open-source image processing software from the U.S. company ImageMagick Studio. The software can read, convert and write pictures in a variety of formats. A denial of service vulnerability exists in the 'ReadSVGImage' function of the svg.c file in ImageMagick version...

Squirrelmail 1.4.22 Remote Code Execution

Advisory ID: SGMA17-001 Title: Squirrelmail Remote Code Execution Product: Squirrelmail Version: 1.4.22 and probably prior Vendor: squirrelmail.org Type: Command Injection Risk level: 4 / 5 Credit: [email protected] CVE: CVE-2017-7692 Vendor notification: 2017-04-04 Vendor fix:...

Memory corruption

The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file...

CVE-2017-7941

CVE-2017-7941 entry rejected/not used; not an active vulnerability.

file: Heap-buffer-overflow in cdf_getuint32

Project: https://github.com/file/file.git Detailed report: https://oss-fuzz.com/testcase?key=4694120629010432 Project: file Fuzzer: libFuzzerfilemagicfuzzer Fuzz target binary: magicfuzzer Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

AZL-6885 CVE-2015-4646 affecting package squashfs-tools for versions less than 4.5-1

1 unsquash-1.c, 2 unsquash-2.c, 3 unsquash-3.c, and 4 unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service application crash via a crafted input...

CVE-2015-4646

1 unsquash-1.c, 2 unsquash-2.c, 3 unsquash-3.c, and 4 unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service application crash via a crafted input...

CVE-2015-4646: Improper Input Validation

1 unsquash-1.c, 2 unsquash-2.c, 3 unsquash-3.c, and 4 unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service application crash via a crafted input...