CVE-2016-1781

CVE-2016-1781 affects Apple WebKit in iOS before 9.3 and Safari before 9.1, where handling of attachment URLs could enable remote tracking of users via unspecified vectors. The Apple security content for Safari 9.1 (WebKit entry) indicates a concrete mitigation: a hidden web page may access devic...

Locky Ransomware Causes 'Internal State of Emergency' at Kentucky Hospital

For a strain of ransomware that’s only been in the wild for a little more than a month, Locky has sure been able to make a name for itself. The malware gained notoriety last month when it confounded administrators at the Hollywood Presbyterian Medical Center in Los Angeles and apparently took...

HackerOne: SECURITY: Referencing previous Reports attachment_IDs on new Reports via Draft_Sync DELETES Attachments

Issue New HackerOne exciting addition is the ability to include inline images by using their referenceID, which is in this case Fxxxxx. The reference ID is bind to the its report ContextID and cant be referenced by others unique reference Is seems that if the referenceID is used in another newest...

Suspicious Mail Attachment Containing JavaScript Code

Mail attachments containing JavaScript code were observed as part of various phishing campaigns. A remote attacker could send e-mails including those files and convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system. This method ...

Suspicious HTTPS YAHOO Mail Attachment Containing JavaScript Code

Many phishing campaigns are known to use mail attachments containing JavaScript code. A remote attacker could send e-mails including such files and convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system. This method is often use...

Suspicious HTTPS Gmail Mail Attachment Containing JavaScript Code

Many phishing campaigns are known to use mail attachments containing JavaScript code. A remote attacker could send e-mails including such files and convince users to manually trigger their execution. This would allow the malicious code to run and infect the target system. This method is often use...

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload

WordPress Theme Beauty Clean 1.0.8 - Arbitrary File Upload Exploit Title: Wordpress Beauty Theme File Upload Vulnerability v1.0.8 Discovery Date: 02.09.2016 Public Disclosure Date:03.09.2016 Vendor Homepage: http://www.yourinspirationweb.com Exploit Author: Colette Chamberland Wordfence Contact:...

Threat Outbreak Alert RuleID21609: Email Messages Distributing Malicious Software on March 9, 2016

Medium Alert ID: 43986 First Published: 2016 March 9 19:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21609 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID21506: Email Messages Distributing Malicious Software on March 8, 2016

Medium Alert ID: 43932 First Published: 2016 March 9 16:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21506 may contain the following files: Name | Siz...

Suspicious Executable Mail Attachment

Certain malicious executable files can be hidden using a different extension for the file. A remote attacker could exploit this vulnerability to entice unsuspecting users to execute a malicious mail attachment. This method is often used by ransomware such as Locky, Cerber, CryptoXXX, and others...

Microsoft Office Mail Attachment Containing Malicious Downloader

A Microsoft Office Mail attachment containing a malicious downloader was observed as part of Locky ransomware campaign. A remote attacker could send spam e-mails including those downloaders and convince users to manually enable them. This would allow the malicious code to run and infect the targe...

Ipswitch MOVEit DMZ and MOVEit Mobile File Read Vulnerabilities

Ipswitch MOVEit is an automated file transfer system from Ipswitch USA. DMZ and Mobile are among the versions. Ipswitch MOVEit DMZ and MOVEit Mobile have a security vulnerability in the 'Send as attachment' function due to the mobile/sendMsg URI failing to adequately filter the ' serverFileIds'...

Threat Outbreak Alert RuleID21167: Email Messages Distributing Malicious Software on February 19, 2016

Medium Alert ID: 43629 First Published: 2016 February 19 14:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21167 may contain the following files: Name |...

Threat Outbreak Alert RuleID21118: Email Messages Distributing Malicious Software on February 18, 2016

Medium Alert ID: 43597 First Published: 2016 February 18 16:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID21118 may contain the following files: Name |...

Mail.ru: VERY DANGEROUS XSS STORED inside emails

Hi guys, This bug is very dangerous you should fix it as fast as you can To reproduce: Attach xss.eml file to a message and send it when a user open the message the javascript will be executed and xss alert box will popup this bug affect tel.mail.ru , m.mail.ru and light.mail.ru but i couldn't...

Threat Outbreak Alert RuleID20984: Email Messages Distributing Malicious Software on February 10, 2016

Medium Alert ID: 43478 First Published: 2016 February 10 14:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20984 may contain the following files: Name |...

Getdpd BB #5 - Persistent Filename Vulnerability

Document Title: =============== Getdpd BB 5 - Persistent Filename Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1569 ID: 14773 Release Date: ============= 2016-02-05 Vulnerability Laboratory ID VL-ID: ====================================...

The vulnerabilities of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat allow attackers to cause service interruptions or execute arbitrary codes.

The vulnerability of PDF viewing and editing programs like Adobe Reader, Document Cloud, Adobe Reader, and Adobe Acrobat arises due to buffer overflows. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure memory corruption by using a specially...

Stack overflow

Stack-based buffer overflow in the pharfixfilepath function in ext/phar/phar.c in PHP before 5.4.43, 5.5.x before 5.5.27, and 5.6.x before 5.6.11 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value, as demonstrated by mishandling...

Threat Outbreak Alert RuleID20194: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42798 First Published: 2015 December 21 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20194 may contain the following files: Name |...