November 14, 2017 – Morning Cyber Coffee Headlines – “Hole Punch” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 14, 2017 - Headlines Carbon Black in the News: Carbon Black taps...

September 1, 2017 – Morning Cyber Coffee Headlines – “Labor Day Weekend” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! September 1, 2017 - Headlines Carbon Black in the News: This Week In...

labor-pain-management.wiki.usfca.edu XSS vulnerability

Open Bug Bounty ID: OBB-266008 Description| Value ---|--- Affected Website:| labor-pain-management.wiki.usfca.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...

DHS Chairman Paints Bleak U.S. Cybersecurity Picture

SAN FRANCISCO – The United States is losing ground against its adversaries as illustrated by reports of Russian and Chinese hacking of U.S. interests, and breaches against private companies such as Yahoo, said Rep. Michael McCaul R-TX, chairman of the House Committee on Homeland Security, during ...

Contraction Timer for Labor - GPL license, Native code usage, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Contraction Timer for Labor published at the 'play' market has multiple vulnerabilities...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise HRMS Component

Oracle PeopleSoft Enterprise is an enterprise human capital management solution. An unspecified vulnerability in the Time and Labor subcomponent of the Oracle PeopleSoft Enterprise HRMS component allows remote attackers to exploit the vulnerability to compromise the confidentiality, integrity of...

CVE-2014-6586

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Time and Labor...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Time and Labor...

CVE-2014-6586

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Time and Labor...

Microsoft Internet Explorer CGenericElement Object Use-After-Free Vulnerability

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Oil, Energy Watering Hole Attacks Linked to DOL attack

A string of watering hole attacks targeting oil and energy companies dating back to May could be linked to similar attacks against the U.S. Department of Labor website. Researchers at Cisco discovered the compromised domains of 10 oil and energy companies worldwide, including hydroelectric plants...

CVE-2013-3784

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor...

CVE-2013-3784

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor...

Design/Logic Flaw

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor...

CVE-2013-3784

Affected software: Oracle PeopleSoft Enterprise HRMS (Oracle PeopleSoft Products 9.1). CVE-2013-3784 is described as an unspecified vulnerability in Time and Labor that allows remote authenticated users to affect confidentiality and integrity via unknown vectors. CVSS v2 base score is 5.5 (Partia...

CVE-2013-3784

Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor...

USAID a Target of DoL Watering Hole Attackers

One of the nine sites serving malware tied to the recent watering hole attack on the U.S. Department of Labor was located in Cambodia and has ties to the United States Agency for International Development USAID. Speculation has it that the DoL attack was targeting downstream employees at the...

Microsoft Patch Zero Day Used to Attack Deptartment of Labor

Microsoft will ship 10 bulletins in the May edition of Patch Tuesday. The company considers just two of the patches critical, one of which supplements the currently available “Fix it” tool that resolved the IE zero-day vulnerability exploited recently in a watering-hole attack targeting the U.S...

Microsoft Internet Explorer CGenericElement Object Use-After-Free

This Metasploit module exploits a vulnerability found in Microsoft Internet Explorer. A use-after-free condition occurs when a CGenericElement object is freed, but a reference is kept on the Document and used again during rendering, an invalid memory that's controllable is used, and allows...

Microsoft Internet Explorer CGenericElement Object Use-After-Free

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...