GLSA-201708-04 : Ked Password Manager: Information leak

The remote host is affected by the vulnerability described in GLSA-201708-04 Ked Password Manager: Information leak A history file in /.kedpm/history is written in clear text. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master...

RedHat Update for git RHSA-2017:2485-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Threat Outbreak Alert RuleID30192: Email Messages Distributing Malicious Software on August 15, 2017

Medium Alert ID: 54842 First Published: 2017 August 15 15:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30192 may contain the following files: Name |...

[SECURITY] Fedora 26 Update: subversion-1.9.7-1.fc26

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

Threat Outbreak Alert RuleID29944: Email Messages Distributing Malicious Software on August 7, 2017

Medium Alert ID: 54753 First Published: 2017 August 7 20:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29944 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID29913: Email Messages Distributing Malicious Software on August 2, 2017

Medium Alert ID: 54727 First Published: 2017 August 3 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29913 may contain the following files: Name | Si...

Rspamd Cross-Site Scripting Vulnerability

Rspamd is a fast spam filtering system. The system evaluates and filters spam through regular expressions, statistical analysis and blacklists. A cross-site scripting vulnerability exists in the interface/js/app/history.js file of the WebUI in versions of Rspamd prior to 1.6.3. A remote attacker...

Moderate: Red Hat Security Advisory: git security and bug fix update

An update for git is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

WakaTime: Failure to check password history

I discovered that old passwords could be reused and believe that wakatime.com could benefit if there was a check for old passwords in your database. Because password reuse is an important concern in any organization. Many users want to reuse the same password for their account over a long period ...

CVE-2017-11737

interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page...

UBUNTU-CVE-2017-11737

interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page...

[SECURITY] Fedora 26 Update: subversion-1.9.6-2.fc26

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...

Threat Outbreak Alert RuleID29911: Email Messages Distributing Malicious Software on July 24, 2017

Medium Alert ID: 54570 First Published: 2017 July 24 16:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29911 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29873: Email Messages Distributing Malicious Software on July 21, 2017

Medium Alert ID: 54543 First Published: 2017 July 21 13:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29873 may contain the following files: Name | Siz...

Threat Outbreak Alert RuleID29832: Email Messages Distributing Malicious Software on July 20, 2017

Medium Alert ID: 54536 First Published: 2017 July 20 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29832 may contain the following files: Name | Siz...

Legal Robot: [New Feature] Password history check

A security researcher discovered that old passwords could be reused and suggested that Legal Robot check new passwords against previous passwords. i discovered that old passwords could be reused and suggested that Legal Robot check new passwords against previous passwords. i really thank legal...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2017-15382)

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle Corporation.Oracle Customer Interaction History is one of the customer interaction history management components. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Unspecified Vulnerability in Oracle Customer Interaction History

Oracle E-Business Suite is a fully integrated suite of global business management software from Oracle Corporation.Oracle Customer Interaction History is one of the customer interaction history management components. A security vulnerability exists in the User Interface subcomponent of the Oracle...

Inspector - Privilege Escalation Unix Helper

Inspector is a python script for help in privilege escalation, for linux environement. After starting, this script search the kernel version and check if is exploit exists, load file history bash,zsh,mysql... and load list of programs loaded with root user. Download on server wget...

Threat Actors Target Chinese Language News Sites

A California-based news website covering China, called China Digital Times, was targeted in a spying campaign that involved phishing lures and the use of the NetWire remote access Trojan. The attacks began in February 2017 and were part of a wider campaign of phishing, reconnaissance and malware...