Threat Outbreak Alert RuleID17192: Email Messages Distributing Malicious Software on August 10, 2015

Medium Alert ID: 40359 First Published: 2015 August 10 14:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID17192 may contain the following files: Name |...

Fedora 21 : mantis-1.2.19-3.fc21 (2015-12010)

Security fix for CVE-2015-5059 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

Fedora 22 : drupal6-cck-2.10-1.fc22 (2015-12037)

https://www.drupal.org/project/cck Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300...

Fedora 22 : lighttpd-1.4.36-1.fc22 (2015-12252)

Latest upstream security release : http://www.lighttpd.net/2015/7/26/1.4.36/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Moderate: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

This Antenna Can Remotely Steal Data From Devices using Sound Waves

Remember the previously demonstrated technique to Hack into air-gapped computers using Heat waves? What if the same was possible to hack computers to steal data using Sound waves? Imagine, If a remote hacker could steal classified information from a targeted computer without having to physically...

Fedora 21 : libuser-0.62-1.fc21 (2015-12064)

Security fix for CVE-2015-3245, CVE-2015-3246 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

NETGEAR ReadyNAS LAN dbbroker 6.2.4 - Credential Disclosure

NETGEAR ReadyNAS LAN dbbroker 6.2.4 - Credential Disclosure !/usr/bin/env python Exploit Title: NETGEAR ReadyNAS LAN /dbbroker Credential Stealing Date: 25/07/2015 Exploit Author: St0rn Vendor Homepage: www.netgear.fr/business/products/storage/readynas Software Link:...

Ubuntu 12.04 LTS : linux-lts-trusty vulnerabilities (USN-2701-1)

Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested NMIs non-maskable interrupts. An unprivileged local user could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges. CVE-2015-3290 Andy Lutomirski discovered a flaw that allo...

Fedora 21 : httpd-2.4.16-1.fc21 (2015-11792)

Update to new version 2.4.16. This update fixed various bugs as well as few security issues. For full changelog, see http://www.apache.org/dist/httpd/CHANGES2.4.16 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora 22 : ipython-2.4.1-7.fc22 (2015-11677)

Fix CSRF issue. - Fix font-awesome paths bug 1219956 - Add upstream patch to fix PyQt4 import bug 1219997 - Use python2 macros, fix python3 shebang fix Fix fontawesome path Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 22 : nx-libs-3.5.0.32-1.fc22 (2015-11244)

Update to nx-libs 3.5.0.32 : - Proper integration of all patches in the source tarballs. Bugs in the tarball generation script and patch file names prohibited inclusion of many patches previously, including security fixes. - Better support for debug DEBUG, TEST, TRACE and other directives builds,...

Researchers Hack TrackingPoint Rifle's Precision Targeting System

TrackingPoint rifles are state-of-the-art precision hunting and sniper rifles that come equipped with a networked tracking scope that’s accessible via Wi-Fi, and comes complete with USB ports and a mobile app. It’s almost foolproof shooting, albeit at a $13,000 price tag. And the security of all ...

Amazon Linux AMI : bind (ALAS-2015-573)

As reported upstream, an error in the handling of TKEY queries can be exploited by an attacker for use as a denial-of-service vector, as a constructed packet can use the defect to trigger a REQUIRE assertion failure, causing BIND to exit. C Tenable Network Security, Inc. The descriptive text and...

Fedora 21 : elfutils-0.163-1.fc21 (2015-11380)

Update to 0.163. Hardening fixes. Updated eu-addr2line utility. Various bug fixes. Updated translations. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much ...

Debian DLA-281-1 : expat security update

Multiple integer overflows in the XMLGetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a denial of service heap-based buffer overflow or possibly have unspecified other impact via crafted XML data, a related...

SUSE SLED11 / SLES11 Security Update : krb5 (SUSE-SU-2015:1282-1)

krb5 was updated to fix three security issues. Remote authenticated users could cause denial of service. These security issues were fixed : - CVE-2014-5353: NULL pointer dereference when using a ticket policy name as password name bsc910457. - CVE-2014-5354: NULL pointer dereference when using...

Hawkeye-G 3.0.1.4912 - Cross-Site Request Forgery

Exploit Title: CSRF, Network Threat Appliance IDS / IPS Google Dork: intitle: CSRF Network Threat Appliance IDS / IPS Date: 2015-07-24 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: www.hexiscyber.com Software Link: www.hexiscyber.com/products/hawkeye-g...

Ubuntu 14.10 : Linux kernel vulnerabilities (USN-2685-1)

A flaw was discovered in the kvm kernel virtual machine subsystem's kvmapichasevents function. A unprivileged local user could exploit this flaw to cause a denial of service system crash. CVE-2015-4692 A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker...

Ubuntu 12.04 LTS : linux vulnerabilities (USN-2678-1)

A flaw was discovered in the user space memory copying for the pipe iovecs in the Linux kernel. An unprivileged local user could exploit this flaw to cause a denial of service system crash or potentially escalate their privileges. CVE-2015-1805 Daniel Borkmann reported a kernel crash in the Linux...