Threat Outbreak Alert RuleID29008: Email Messages Distributing Malicious Software on May 5, 2017

Medium Alert ID: 53720 First Published: 2017 May 5 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29008 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID28983: Email Messages Distributing Malicious Software on May 4, 2017

Medium Alert ID: 53713 First Published: 2017 May 4 17:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28983 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID29002: Email Messages Distributing Malicious Software on May 4, 2017

Medium Alert ID: 53709 First Published: 2017 May 4 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29002 may contain the following files: Name | Size ...

My comments on Forrester’s “Vulnerability Management vendor landscape 2017”

A top consulting company, Forrester Research, recently published report "Vendor Landscape: Vulnerability Management, 2017". You can read for free by filling a small form on Tenable web site. What's interesting in this document? First of all, Josh Zelonis and co-authors presented their version of ...

Threat Outbreak Alert RuleID28948: Email Messages Distributing Malicious Software on May 1, 2017

Medium Alert ID: 53663 First Published: 2017 May 1 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28948 may contain the following files: Name | Size ...

CVE-2017-8296

kedpm 0.5 and 1.0 creates a history file in /.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the "password" command is used with an argument. The names of the password...

CVE-2017-8296

kedpm 0.5 and 1.0 creates a history file in /.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the "password" command is used with an argument. The names of the password...

CVE-2017-8296

kedpm 0.5 and 1.0 creates a history file in /.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the "password" command is used with an argument. The names of the password...

Default credentials

kedpm 0.5 and 1.0 creates a history file in /.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the "password" command is used with an argument. The names of the password...

UBUNTU-CVE-2017-8296

kedpm 0.5 and 1.0 creates a history file in /.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the "password" command is used with an argument. The names of the password...

CVE-2017-8296

kedpm 0.5 and 1.0 creates a history file in /.kedpm/history that is written in cleartext. All of the commands performed in the password manager are written there. This can lead to the disclosure of the master password if the "password" command is used with an argument. The names of the password...

CVE-2017-8296

CVE-2017-8296 affects kedpm versions 0.5 and 1.0. A history file in ~/.kedpm/history is written in cleartext, exposing commands run in the password manager and the names of created/read entries. This can disclose the master password if the password command is used with an argument. The connected ...

Oracle Customer Interaction Histor Remote Vulnerability

Oracle E-Business Suite is a comprehensive suite of enterprise-class business applications. A security vulnerability exists in the Oracle Customer Interaction History component of Oracle E-Business Suite, which can be exploited by remote attackers to compromise confidentiality, integrity...

CVE-2017-3550

Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite subcomponent: Admin Console. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3550

Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite subcomponent: Admin Console. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3393

CVE-2017-3393 affects Oracle E-Business Suite, specifically the Oracle Advanced Outbound Telephony component (Interaction History). Affected versions are 12.2.3–12.2.6. The flaw enables an unauthenticated attacker, with network access via HTTP, to compromise data in Oracle Advanced Outbound Telep...

CVE-2017-3550

CVE-2017-3550 affects Oracle E-Business Suite, specifically the Customer Interaction History component (subcomponent: Admin Console). Affected versions are 12.1.1, 12.1.2 and 12.1.3. The vulnerability is described as easily exploitable and allows an unauthenticated attacker with network access vi...

CVE-2017-3550

Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite subcomponent: Admin Console. Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

Threat Outbreak Alert RuleID28852: Email Messages Distributing Malicious Software on April 24, 2017

Medium Alert ID: 53539 First Published: 2017 April 24 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28852 may contain the following files: Name | Si...

Chrome Universal XSS using deferred history loads (CVE-2016-1675)

VULNERABILITY DETAILS When a ScopedPageLoadDeferrer is destroyed, the deferring state is updated on the associated pages and loaders. If any history of load was set aside during the event loop the deferrer has been protecting, it's processed during the update without checking if navigation is...