Threat Outbreak Alert RuleID30736: Email Messages Distributing Malicious Software on September 26, 2017

Medium Alert ID: 55387 First Published: 2017 September 26 18:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30736 may contain the following files: Name ...

A week in security (September 18 – September 24)

Last week, we kept you updated on our blog about the infected versions of CCleaner that were offered as downloads on the official servers. We also warned you against a fake IRS notice that delivers a customized spying tool, some of the threats currently facing gamers, and a Netflix scam that has...

Fake IRS notice delivers customized spying tool

While macro-based documents and scripts make up for the majority of malspam attacks these days, we also see some campaigns that leverage documents embedded with exploits. Case in point, we came across a malicious Microsoft Office file disguised as a CP2000 notice. The Internal Revenue Service IRS...

Threat Outbreak Alert RuleID30585: Email Messages Distributing Malicious Software on September 15, 2017

Medium Alert ID: 55240 First Published: 2017 September 15 18:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30585 may contain the following files: Name ...

CVE-2017-8628

creationtimestamp| type| source ---|---|--- 2017-09-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=224 2023-12-18 03:40:48+00:00| seen| https://t.me/arpsyndicate/1903 2026-07-26 07:01:59+00:00| seen| https://t.me/KaitNews/5803 2026-07-26 07:02:02+00:00| seen|...

milu.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-286602 Description| Value ---|--- Affected Website:| milu.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

InsomniaX 2.1.8 Arbitrary Kernel Extension Loading Vulnerability

It was found that the loader application bundled with InsomniaX can be used to load arbitrary Kernel Extensions kext. The loader is normally used to load a kext file that is needed to disable the Lid Sleep. A flaw has been found in the loader that allows a local attacker to load or unload any...

Vik Rent Items 1.3 and previous

Vik Rent Items 1.3 and previous SQL injection Resolution:update to version 1.4 Update notice: https://extensionsforjoomla.com/blog/12-updates/46-security-notices-sql-injection-reports...

Vik Rent Car 1.10 and previous

Vik Rent Car 1.10 and previous, SQL injection Resolution: update to 1.11 Update notice: https://extensionsforjoomla.com/blog/12-updates/46-security-notices-sql-injection-reports...

Vik Appointments 1.4 and previous

Vik Appointments 1.4 and previous, SQL Injection Resolution: update to 1.5 Update notice: https://extensionsforjoomla.com/blog/12-updates/46-security-notices-sql-injection-reports...

Threat Outbreak Alert RuleID29210: Email Messages Distributing Malicious Software on May 22, 2017

Medium Alert ID: 53914 First Published: 2017 May 22 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID29210 may contain the following files: Name | Size...

Schneider Electric SoMachine HVAC

CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Schneider Electric Equipment: SoMachine HVAC Vulnerabilities: Buffer Overflow, DLL Hijack AFFECTED PRODUCTS The following version of SoMachine HVAC, a PLC programming software, is affected: SoMachine HVAC Versions 2.1.0 and prior. IMPACT...

Atlassian's HipChat Hacked — Users' Data May Have Been Compromised

Atlassian's group chat platform HipChat is notifying its users of a data breach after some unknown hacker or group of hackers broke into one of its servers over the weekend and stole a significant amount of data, including group chat logs. What Happened? According to a security notice published o...

Notice of Change Announcement for NetScaler SD-WAN 400-SE (Standard Edition), 400-WO (WAN Optimization Edition) and 2000 WS (Windows Server)

Citrix Systems, Inc. announces a Notice of Status Change for the NetScaler SD-WAN 400-SE, 400- WO and 2000 WS products. The tables below explain the Citrix ADC NetScaler SD-WAN life cycle management milestones as well as important information regarding dates and options during this period. The...

BookLibrary,3.6.14,SQL Injection

BookLibrary by Ordasoft, 3.6.14, SQL Injection Resolutiion: Update to 3.6.15 Update notice: http://ordasoft.com/News/News/book-library-security-update.html...

UserExtranet,1.3.2,SQL Injection

UserExtranet by Beesto.com, 1.3.2 and previous, SQL Injection resolution: update to 1.3.3 update notice: http://www.beesto.com/forum/read.php?30,2085...

TI Online Examination System 2.0 SQL Injection

Exploit Title: TI Online Examination System v2.0 - SQL Injection Google Dork: N/A Date: 12.02.2017 Vendor Homepage: http://textusintentio.com/ Software Buy: https://codecanyon.net/item/ti-online-examination-system-v2/11248904 Demo: http://oesv2.textusintentio.com/ Version: 2.0 Tested on: Win7 x64...

Fedora 24 : php-PHPMailer (2017-c3dc97e1e1)

Version 5.2.22 January 5th 2017 - SECURITY Fix CVE-2017-5223, local file disclosure vulnerability if content passed to msgHTML is sourced from unfiltered user input. Reported by Yongxiang Li of Asiasecurity. The fix for this means that calls to msgHTML without a $basedir will not import images wi...

Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: November 2016

Multiple Cisco products incorporate a version of the Network Time Protocol daemon ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or modify the time being advertised ...

Vulnerabilities Identified in Network Time Protocol Daemon (ntpd)

The Network Time Foundation's NTP Project has released version ntp-4.2.8p9 to address multiple vulnerabilities in ntpd. Exploitation of some of these vulnerabilities may allow a remote attacker to cause a denial-of-service condition. US-CERT encourages users and administrators to review...