Threat Outbreak Alert RuleID22708: Email Messages Distributing Malicious Software on May 5, 2016

Medium Alert ID: 45035 First Published: 2016 May 5 19:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22708 may contain the following files: Name | Size ...

Exploiting CVE-2016-2060 on Qualcomm Devices

Mandiant’s Red Team recently discovered a widespread vulnerability affecting Android devices that permits local privilege escalation to the built-in user “radio”, making it so an attacker can potentially perform activities such as viewing the victim’s SMS database and phone history. The...

Uber: Missing authentication on Notification setting .

Hi , Notification setting link works without cookies so an attacker can steal link from browser histroy and can change notification setting of victim. Notification setting link does not expire even after logout. Steps to reproduce :- 1.Log in as uber rider. 2.Go to profile. 3.Now go to "Manage yo...

Threat Outbreak Alert RuleID22597: Email Messages Distributing Malicious Software on May 1, 2016

Medium Alert ID: 44964 First Published: 2016 May 2 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22597 may contain the following files: Name | Size ...

chromium-browser: address bar spoofing

The HistoryController::UpdateForCommit function in content/renderer/historycontroller.cc in Google Chrome before 50.0.2661.94 mishandles the interaction between subframe forward navigations and other forward navigations, which allows remote attackers to spoof the address bar via a crafted web sit...

CVE-2016-2810

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

CVE-2016-2810

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

CVE-2016-2810

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

Design/Logic Flaw

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

CVE-2016-2810

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

CVE-2016-2810

Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature access requirements via a crafted application that leverages content-provider permissions, as demonstrated by reading the browser history or a saved password...

Threat Outbreak Alert RuleID22494: Email Messages Distributing Malicious Software on April 27, 2016

Medium Alert ID: 44851 First Published: 2016 April 27 13:48 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22494 may contain the following files: Name | Si...

Threat Outbreak Alert RuleID22476: Email Messages Distributing Malicious Software on April 26, 2016

Medium Alert ID: 44831 First Published: 2016 April 26 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22476 may contain the following files: Name | Si...

Sidhdhargal History in Tamil - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sidhdhargal History in Tamil published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID22427: Email Messages Distributing Malicious Software on April 22, 2016

Medium Alert ID: 44796 First Published: 2016 April 22 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22427 may contain the following files: Name | Si...

CVE-2016-2280

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database PHD R310, R320, and R321 allows remote attackers to cause a denial of service service outage via unspecified vectors...

CVE-2016-2280

This CVE describes a stack-based buffer overflow in Honeywell Uniformance PHD’s Network.dll used by RDISERVER, RAPIServer, apiserver, and UDBServer. According to ICS-CERT Update A, vulnerable versions include Uniformance PHD releases prior to R310.1.1.2, R320.1.0.2, and R321.1.1. Exploitation cou...

CVE-2016-2280

Buffer overflow in RDISERVER in Honeywell Uniformance Process History Database PHD R310, R320, and R321 allows remote attackers to cause a denial of service service outage via unspecified vectors...

Threat Outbreak Alert RuleID22317: Email Messages Distributing Malicious Software on April 18, 2016

Medium Alert ID: 44724 First Published: 2016 April 18 19:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22317KVR may contain the following files: Name |...

Multiple Honeywell Uniformance Process History Database Product Buffer Overflow Vulnerabilities

Honeywell Uniformance Process History Database PHD R310, R320, and R321 are Honeywell International products used with DCS to provide engineering and business analysis. A buffer overflow vulnerability exists in multiple Honeywell Uniformance PHD products and can be exploited by remote attackers t...