4477 matches found
Lack of Communication Achilles' Heel for Ransomware Fighters
BOSTON—Collaboration is important when it comes to fighting ransomware, but the lack of communication around the issue remains a serious impediment, law enforcement says. “If we don’t know about it and no one keeps track of it, then no one cares,” Frank McLaughlin, a detective with the Boston...
Apple iOS 10.3 - Control Panel Denial of Service Vulnerability
Document Title: =============== Apple iOS 10.3 - Control Panel Denial of Service Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2059 Video: https://www.youtube.com/watch?v=MSscCLATxPQ Release Date: ============= 2017-04-26 Vulnerability Laboratory ID...
Stuxnet LNK Exploits Still Widely Circulated
One of the alleged mandates around the development of the Stuxnet worm was that malware’s numerous components—which included a handful of zero days—should never escape the Natanz uranium enrichment facility in Iran. Eight years later, evidence continues to mount as to how that mandate was...
Stories From Two Years in an IoT Honeypot
SINT MAARTEN—Curious just how susceptible some of the more vulnerable IoT devices are, a researcher set up a series of honeypots at his friends’ houses to record traffic, exploit attempts and other statistics. Dan Demeter, a junior security researcher with Kaspersky Lab’s Global Research and...
PHPCMS v9. 6. 0 arbitrary file upload vulnerability analysis-vulnerability warning-the black bar safety net
Author: p0wd3r know Chong Yu 404 security lab Date: 2017-04-12 0x00 vulnerability overview Vulnerability description A few days ago phpcms v9. 6 arbitrary file upload vulnerability caused by a safety ring hot, by the vulnerability the attacker may be in the unauthorized case any file is uploaded,...
[slackware-security] libtiff
New libtiff packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libtiff-4.0.7-i586-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For more information, see:...
No More Ransom — 15 New Ransomware Decryption Tools Available for Free
No More Ransom, so is the Ransomware Threat. Launched less than a year ago, the No More Ransom NMR project has increased its capacity with new partners and new decryption tools added to its now global campaign to combat Ransomware. Started as a joint initiative by Europol, the Dutch National...
Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities
Document Title: =============== Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2049 View Video: https://www.youtube.com/watch?v=qLC8f7liPk8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2045...
Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities
Document Title: =============== Sync Breeze v9.5 - Multiple Buffer Overflow Vulnerabilities References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2049 View Video: https://www.youtube.com/watch?v=qLC8f7liPk8 Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2045...
web.media.mit.edu XSS vulnerability
Open Bug Bounty ID: OBB-220692 Description| Value ---|--- Affected Website:| web.media.mit.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CentOS Update for firefox CESA-2017:0558 centos7
Check the version of firefox SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882683";...
CentOS 7 : firefox (CESA-2017:0558)
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
firefox security update
CentOS Errata and Security Advisory CESA-2017:0558 An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Critical: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Schneider Electric ClearSCADA
CVSS v3 7.5 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Schneider Electric Equipment: ClearSCADA Vulnerability: Improper Input Validation AFFECTED PRODUCTS The following versions of ClearSCADA, server and communications driver processes, are affected: All supported version...
Navetti PricePoint 4.6.0.0 XSS / CSRF / SQL Injection Vulnerabilities
Exploit for php platform in category web applications title: Multiple vulnerabilities product: Navetti PricePoint vulnerable version: 4.6.0.0 fixed version: 4.7.0.0 or higher CVE number: - impact: high/critical homepage: http://www.navetti.com/ found: 2016-07-18 by: W. Schober Office Vienna SEC...
Keys for Dharma Ransomware Released
Victims of the Dharma strain of ransomware can now get their files back, free of charge. Decryption keys for the ransomware were added to the Kaspersky Lab’s Rakhni decryptor tool Thursday morning. Dharma ransomware .dharma decryptor released pic.twitter.com/sIQorypOzj — Anton Ivanov @antonivanov...
Joomla com_blog v1.6 - (Pid) SQL Injection Vulnerability
Document Title: =============== Joomla comblog v1.6 - Pid SQL Injection Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2037 Release Date: ============= 2017-02-28 Vulnerability Laboratory ID VL-ID: ==================================== 203...
Windows Botnet Spreading Mirai Variant
A Chinese-speaking attacker is spreading a Mirai variant from a repurposed Windows-based botnet. Researchers at Kaspersky Lab published a report today, and said the code was written by an experienced developer who also built in the capability to spread the IoT malware to Linux machines under...
SonicDICOM PACS 2.3.2 Multiple Stored Cross-Site Scripting Vulnerabilities
Summary SonicDICOM is PACS software that combines the capabilities of DICOM Server with web browser based DICOM Viewer. Description The application suffers from multiple stored XSS vulnerabilities. Input passed to several API POST parameters is not properly sanitised before being returned to the...